Vulnerabilities > CVE-2005-4326 - Remote Security vulnerability in PowerChute Network Shutdown

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
apc

Summary

The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), which allows remote attackers to sniff authentication credentials.

Vulnerable Configurations

Part Description Count
Application
Apc
1