Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6w7r-4v6h-jjq5

Опубликовано: 12 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service (SMS) accounts configuration files to discover the associated simple mail transfer protocol (SMTP) account credentials and the SIM card PIN code. Successful exploitation of this vulnerability could allow an unauthorized user access to the underlying email account and SIM card.

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service (SMS) accounts configuration files to discover the associated simple mail transfer protocol (SMTP) account credentials and the SIM card PIN code. Successful exploitation of this vulnerability could allow an unauthorized user access to the underlying email account and SIM card.

EPSS

Процентиль: 12%
0.00039
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-312
CWE-522

Связанные уязвимости

CVSS3: 5.5
nvd
около 3 лет назад

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service (SMS) accounts configuration files to discover the associated simple mail transfer protocol (SMTP) account credentials and the SIM card PIN code. Successful exploitation of this vulnerability could allow an unauthorized user access to the underlying email account and SIM card.

CVSS3: 5.5
fstec
около 3 лет назад

Уязвимость SCADA-системы PcVue, связанная с незашифрованным хранением учетных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 12%
0.00039
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-312
CWE-522