Approved changes feed: RSS · Atom

cpe:2.3:o:kaco-newenergy:xp100u_firmware:xp-java_2.0:*:*:*:*:*:*:*

part: o version: xp-java_2.0 update: *

VendorKaco Newenergy (3b89edc8-66de-52e8-917e-aa9692df0f0a)
ProductXp100U Firmware (1a558b59-68d8-540e-b57b-fd0bd0f5d96a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3252 vulnerable 2026-06-08 05:33:51.043595 Details available
KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.
Published: 2021-02-23T14:15:32.000Z
Updated: 2024-08-03T16:53:16.506Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.