Administrative password disclosure via plaintext storage

Plaintext password storage in Plug&Track Sensor Net Connect V2 2.24 allows physically proximate attackers to retrieve the administrative password. Nozomi Networks has not disclosed the exact storage locus or the operation used to extract the cleartext credential. Exploitation requires physical access to the device and the absence of protective measures such as full-disk encryption; the reported consequence is credential disclosure.