The host is installed with Apple Mac OS X 10.8 before 10.13 and is prone to an unspecified vulnerability. A flaw is present in the application, which fails to handle the security state of the captive portal browser which was not obvious. Successful exploitation could allow attackers to send a password unencrypted over the network unknowingly.