ALBEDO Telecom Net.Time PTP/NTP Clock Insufficient Session Expiration Vulnerability

A vulnerability exists in ALBEDO Telecom Net.Time - PTP/NTP clock, specifically in software release 1.4.4 (Serial No. NBC0081P). The issue arises from insufficient session expiration, which could allow an attacker to send passwords over unencrypted connections, making the product susceptible to interception.

Impact

Exploitation of this vulnerability could enable an attacker to intercept passwords transmitted over unencrypted connections, potentially leading to unauthorized access or manipulation of the device.

Remediation

Users are advised to update the Net.Time - PTP/NTP clock to version 1.6.1. For more information, contact ALBEDO Telecom.