Binardat 10G08-0800GSM Network Switch Password Exposure Vulnerability via Base64-Encoded Cookie

A vulnerability exists in Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209. These versions store user passwords in a client-side cookie as Base64-encoded values, which can be accessed through the web interface. Since Base64 encoding is reversible and lacks confidentiality, an attacker with access to the cookie can easily decode it to retrieve the plaintext password.

Impact

This vulnerability allows for the cleartext exposure of user passwords, which could lead to unauthorized access if the exposed passwords are used for authentication.