description: A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords.
problem types: CWE-311: Missing Encryption of Sensitive Data
affected:
{
product: SICLOCK TC100, SICLOCK TC400
vendor: Siemens AG
versions:
status: affected, version: SICLOCK TC100 : All versions
status: affected, version: SICLOCK TC400 : All versions
}