CVE-2022-29960

Опубликовано: 26 июл. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. DES with hardcoded cryptographic keys is used for protection of certain system credentials, engineering files, and sensitive utilities.

Ссылки

https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
Not Applicable
Third Party Advisory
US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-221-03
Third Party Advisory
US Government Resource
https://www.forescout.com/blog/
Third Party Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
Not Applicable
Third Party Advisory
US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-221-03
Third Party Advisory
US Government Resource
https://www.forescout.com/blog/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emerson:openbsi:*:*:*:*:*:*:*:*

Версия до 5.9 (исключая)

cpe:2.3:a:emerson:openbsi:5.9:-:*:*:*:*:*:*

cpe:2.3:a:emerson:openbsi:5.9:sp1:*:*:*:*:*:*

cpe:2.3:a:emerson:openbsi:5.9:sp2:*:*:*:*:*:*

cpe:2.3:a:emerson:openbsi:5.9:sp3:*:*:*:*:*:*

EPSS

Процентиль: 25%

0.00086

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-798

Связанные уязвимости

GHSA-w6v8-54jm-g2j3