Endress+Hauser MEAC300-FNADE4 Unencrypted VNC Communication Vulnerability

A vulnerability exists in the Endress+Hauser MEAC300-FNADE4 product, all firmware versions, where VNC server and client communication is unencrypted. This flaw allows attackers to intercept traffic and access sensitive information.

Impact

Exploitation of this vulnerability could lead to interception of VNC communication, allowing attackers to access sensitive data.

Remediation

Users are advised to update to the latest version of the MEAC300-FNADE4. General security practices should also be applied to minimize network exposure and ensure the device operates in a secure IT environment.