CVE-2020-10636CWE-326

ICSA-20-140-02 Emerson OpenEnterprise

Medium · published February 24, 2022

CVSS v3.1
6.5
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00278 · 19.1th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2022-02-24T18:50Z
EPSS history
Timeline
  • 24 FEB 18:50Z
    ICSA-20-140-02 Emerson OpenEnterprise
    cvelistv5