CVE-2018-12594

Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct request for the data/fileinfo.xml or job/job.json file, as demonstrated the Master Password field.

high 7.5 CVSS 3.1
Published: Jun 20, 2018
Modified: Jun 2, 2026
Vendor: Reliablecontrols
Product: Mach-Prowebcom Firmware
Versions: 7.80

Description

Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct request for the data/fileinfo.xml or job/job.json file, as demonstrated the Master Password field.

References