Vulnerability Details CVE-2019-6525
AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and inter-node communications. A user with low privileges could make use of an API to obtain the credentials for this account.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.0%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 4.0
References
Products affected by CVE-2019-6525
-
cpe:2.3:a:aveva:wonderware_system_platform:2014
-
cpe:2.3:a:aveva:wonderware_system_platform:2017