CVE-2022-1794CWE-256

Plaintext Storage of a password in CODESYS V3 OPC DA Server

Medium · published July 11, 2022

CVSS v3.1
5.5
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2022-07-11T10:40Z
EPSS history
Timeline
  • 11 JUL 10:40Z
    Plaintext Storage of a password in CODESYS V3 OPC DA Server
    cvelistv5