CVE-2022-29733

CVE-2022-29733 affects Delta Controls enteliTOUCH versions 3.40.3935, 3.40.3706, and 3.33.4005, allowing sensitive authentication credentials to be transmitted and stored in cleartext. This medium-severity vulnerability (CVSS 5.9) enables attackers to intercept HTTP cookie authentication via a man-in-the-middle attack, leading to potential compromise of user accounts. While the attack complexity is high, successful exploitation could result in significant confidentiality impact. Currently, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.