This vulnerability involves the plaintext storage of passwords in the CONPROSYS nano Series Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* by Contec Co., Ltd. If exploited, an attacker with physical access to the device may retrieve stored credentials. The CVSS 3.1 vector indicates the attack requires physical access (AV:P), has high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), and impacts confidentiality (C:H) but not integrity or availability. The affected versions are those prior to 1.82, 1.02, and 1.61 as specified.

An attacker with physical access to the affected device can obtain stored passwords due to plaintext storage, compromising confidentiality. There is no indication of impact on integrity or availability. The vulnerability does not require network access or user interaction but does require physical access, limiting remote exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict physical access to affected devices to prevent credential theft.