CVE-2017-20040: SICUNET Access Controller Password Storage cleartext storage

Security readout for executives and security teams

SICUNET Access Controller version 0.32-05z reportedly stores passwords with weak or cleartext protection. An attacker needs local access, so this is most concerning where the controller host or appliance is shared, poorly locked down, or already compromised. Exposure appears limited to SICUNET Access Controller 0.32-05z deployments. Risk depends on whether attackers, contractors, or compromised accounts can obtain local access to the controller environment or stored password material. Treat as a targeted operational risk, not an internet-wide emergency. Prioritize sites running the affected controller where local access is weak or shared among multiple users. Mitigation focus: Identify any SICUNET Access Controller 0.32-05z installations.; Check SICUNET or product maintainer guidance for fixed versions or configuration mitigations.; Restrict local access to controller hosts and management appliances..

Prepared

May 25, 2026, 12:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.