« Volver al listado

CVE-2015-6474

Estado: ModificadaMedia (5)—

Vulnerabilidad en IBC Solar ServeMaster TLP+ y Danfoss TLX Pro+, permite a atacantes remotos descubrir contraseñas en texto plano mediante la lectura de código fuente HTML.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

IBC Solar — Danfoss TLX Pro+IBC Solar — Servemaster Tlp+

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-6474",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-09-26T01:59:16.407",
  "references": [
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to discover cleartext passwords by reading HTML source code."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en IBC Solar ServeMaster TLP+ y Danfoss TLX Pro+, permite a atacantes remotos descubrir contraseñas en texto plano mediante la lectura de código fuente HTML."
    }
  ],
  "lastModified": "2026-06-17T00:30:55.837",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibc_solar:danfoss_tlx_pro\\+:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAC7D58E-497E-4EBB-8CD6-C75864844209"
            },
            {
              "criteria": "cpe:2.3:a:ibc_solar:servemaster_tlp\\+:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F822430-B709-4275-AEC5-DB3347BA0888"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}