CVE-2016-10512: Multitech Faxfinder

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext.

Affected products

• Multitech Faxfinder: affected versions not specified

Published 2017-09-30. Last modified 2026-06-17.