← voltar
CVE-2021-32942

CVE-2021-32942

CVSS 6.6 MEDIUMEPSS 0.2%CWE-316
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Produtos afetados
AVEVA · InTouch

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-03https://www.aveva.com/en/support/cyber-security-updates/