Inaba Denki Sangyo CHOCO TEI WATCHER Mini Password Storage Vulnerability

A vulnerability exists in the CHOCO TEI WATCHER mini (IB-MCT001) in all versions, allowing an attacker with access to the device's microSD card to retrieve the login password. This issue arises from storing passwords in a recoverable format, creating a risk of unauthorized password extraction.

Impact

Exploitation of this vulnerability enables an attacker to obtain the product's login password from the microSD card.

Remediation

To mitigate this vulnerability, restrict the device's operation to authorized users only. Since the microSD card cannot be encrypted, it should be physically secured to prevent unauthorized removal or tampering. Regular inspections can help ensure the device and its storage remain intact.