CVE-2026-55985
Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information
- State
- Published
- Severity
- 5.3 Medium
- Published
- Jul 24, 2026
- Updated
- Sep 4, 2026
- Reserved
- Jul 13, 2026
Description
The web management interface in Tycon Systems TPDIN-Monitor-WEB2
stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | icscert |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
TPDIN-Monitor-WEB2Tycon Systems |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.