CVE-2018-9161: Prismaindustriale Checkweigher Prismaweb

Critical severity, CVSS 9.8. EPSS: 56.7% chance of exploitation in the next 30 days.

Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js.

Affected products

• Prismaindustriale Checkweigher Prismaweb: version 1.21 only

Published 2018-03-31. Last modified 2026-06-17.