CVE-2012-1977 WellinTech KingSCADA Missing Encryption of Sensitive Data
HighCVSS 7.1
EPSS 0.79%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wellintech kingview | = 3.0 | No fix listed |
| wellintech kingscada | = 3.0 | No fix listed |
References
- www.cisa.gov
- dsecrg.com
- www.us-cert.gov third-party-advisory us-government-resource