Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating system.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16280
Reference (s):
- https://www.contextis.com/en/resources/advisories/cve-2020-16280