Vulnerabilities

CVSS

4.3 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Risk score

34.4

Published

2026-07-24

Status

Published

The web management interface in  Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

Weaknesses

CWE-312

Coverage 1

vulnerability

Tycon Systems TPDIN-Monitor-WEB2

Tycon Systems TPDIN-Monitor-WEB2 versions 2.3.9 are vulnerable to a critical authentication bypass flaw, allowing unauthenticated remote attackers to gain full administrative access to the device. This could lead to disr…

CISA Advisories · Jul 21, 2026 Critical

CVE-2026-61884CVE-2026-55985authentication bypasscwe-288cwe-312

All articles mentioning it

Advisories and references

• tyconsystems.com/contact
• cisa.gov/news-events/ics-advisories/icsa-26-202-01
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...