CVE-2024-21869 Vulnerability Details

  /     /     /  

CVE-2024-21869 Metadata Quick Info

CVE Published: 01/02/2024 | CVE Updated: 01/08/2024 | CVE Year: 2024
Source: icscert | Vendor: Rapid Software LLC | Product: Rapid SCADA
Status : PUBLISHED

---

CVE-2024-21869 Description

In Rapid Software LLC\'s Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them.

Metrics

CVSS Version: 3.1 | Base Score: 6.2 MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

l➤ Exploitability Metrics:
    Attack Vector (AV)* LOCAL
    Attack Complexity (AC)* LOW
    Privileges Required (PR)* NONE
    User Interaction (UI)* NONE
    Scope (S)* UNCHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* HIGH
    Integrity Impact (I)* NONE
    Availability Impact (A)* NONE

Weakness Enumeration (CWE)

CWE-ID: CWE-256
CWE Name: CWE-256 Plaintext Storage of a Password
Source: Rapid Software LLC

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).