7.5
CVE-2020-10628
- EPSS 0.74%
- Veröffentlicht 26.06.2020 17:15:10
- Zuletzt bearbeitet 21.11.2024 04:55:43
- Erkennungen
LoginControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Honeywell ≫ Controledge Plc Firmware Version r130.2
Honeywell ≫ Controledge Plc Firmware Version r140
Honeywell ≫ Controledge Plc Firmware Version r150
Honeywell ≫ Controledge Plc Firmware Version r151
Honeywell ≫ Controledge Rtu Firmware Version r101
Honeywell ≫ Controledge Rtu Firmware Version r110
Honeywell ≫ Controledge Rtu Firmware Version r140
Honeywell ≫ Controledge Rtu Firmware Version r150
Honeywell ≫ Controledge Rtu Firmware Version r151
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.74% | 0.498 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-319 Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
https://www.us-cert.gov/ics/advisories/icsa-20-175-02