CVE-2014-9199
Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength
The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.
Exploit likelihood
What each source reports
CVE List Score used
Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength
The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.
- Record
CVE-2014-9199- CVSS 2.0
- 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-326
- Updated
- 2026-11-02
EUVDEUVD-2014-9024
The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.
- Record
EUVD-2014-9024- CVSS 2.0
- 10.0 Critical
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-v59h-h3v9-hmm2 No score
The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover...
The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.
- Record
GHSA-v59h-h3v9-hmm2- Weakness
- CWE-200, CWE-326
- Updated
- 2026-11-02
NVD
The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.
- Record
CVE-2014-9199- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-326, CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-9199 is a vulnerability (CVSS 10.0) in Clorius Controls A\/s Java Web Client, published January 17, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.52%, the 84th percentile. No source names a fixed version.