Описание
An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has access to an authenticated session.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- MitigationThird Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- MitigationThird Party AdvisoryUS Government Resource
Уязвимые конфигурации
Одно из
EPSS
6.7 Medium
CVSS3
4.4 Medium
CVSS2
Дефекты
Связанные уязвимости
An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has access to an authenticated session.
Уязвимость средства диспетчерского контроля технологических операций GE Proficy HMI/SCADA iFIX, клиент-серверного приложения обработки данных и контроля технологических операций Proficy HMI/SCADA CIMPLICITY и репозитория Proficy Historian, связанная с недостаточно надежной защитой учетных записей, позволяющая нарушителю узнать пароли пользователей
EPSS
6.7 Medium
CVSS3
4.4 Medium
CVSS2