CVE-2020-16235CWE-326

Emerson OpenEnterprise - Inadequate Encryption Strength

Low · published May 19, 2022

CVSS v3.1
3.8
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00101 · 0.9th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2022-05-19T17:23Z
EPSS history
Timeline
  • 19 MAY 17:23Z
    Emerson OpenEnterprise - Inadequate Encryption Strength
    cvelistv5