TI-2020-17474 CVE-2020-28946 · GHSA-888q-3vrq-2mw3
An improper webserver configuration on Plum IK-401 devices with firmware before 1.02…
Priority LOW 35
An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker (with network access to the device) to obtain the configuration file, including hashed credential data.