Centralny Instytut Ochrony Pracy STER Unencrypted TCP Traffic Vulnerability Allowing Man-In-The-Middle Attacks

A vulnerability exists in the STER software developed by the Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy, affecting all versions prior to 9.5. The issue arises from the use of unencrypted TCP traffic for data transmission, which allows attackers to conduct Man-In-The-Middle attacks and intercept sensitive information such as passwords, personal data, and authentication tokens.

Impact

Exploitation of this vulnerability could lead to unauthorized interception of sensitive data, including passwords, personal information, and authentication tokens.

Remediation

Users can upgrade to STER version 9.5 or later to address this vulnerability.