CVE-2005-1606: Positive Software H-Sphere Winbox

Medium severity, CVSS 4.6. EPSS: 0.8% chance of exploitation in the next 30 days.

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges.

Affected products

• Positive Software H-Sphere Winbox: version 2.4.2_patch_4 only; version 2.4.3_rc1 only

Published 2005-05-16. Last modified 2026-06-16.