CVE-2012-1977CWE-311

WellinTech KingSCADA Missing Encryption of Sensitive Data

High · published May 9, 2012

CVSS v2.0
7.1
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.

The record
Technical detail
CVSS v2.0
7.1 · HIGH
Vector
AV:N/AC:M/Au:N/C:C/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00789 · 55.5th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2012-05-09T10:00Z
EPSS history
Timeline
  • 09 MAY 10:00Z
    WellinTech KingSCADA Missing Encryption of Sensitive Data
    cvelistv5