CVEDB API

ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.9%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2020-10628

Honeywell » Controledge Plc » Version: N/A

cpe:2.3:h:honeywell:controledge_plc:-
Honeywell » Controledge Rtu » Version: N/A

cpe:2.3:h:honeywell:controledge_rtu:-
Honeywell » Controledge Plc Firmware » Version: r130.2

cpe:2.3:o:honeywell:controledge_plc_firmware:r130.2
Honeywell » Controledge Plc Firmware » Version: r140

cpe:2.3:o:honeywell:controledge_plc_firmware:r140
Honeywell » Controledge Plc Firmware » Version: r150

cpe:2.3:o:honeywell:controledge_plc_firmware:r150
Honeywell » Controledge Plc Firmware » Version: r151

cpe:2.3:o:honeywell:controledge_plc_firmware:r151
Honeywell » Controledge Rtu Firmware » Version: r101

cpe:2.3:o:honeywell:controledge_rtu_firmware:r101
Honeywell » Controledge Rtu Firmware » Version: r110

cpe:2.3:o:honeywell:controledge_rtu_firmware:r110
Honeywell » Controledge Rtu Firmware » Version: r140

cpe:2.3:o:honeywell:controledge_rtu_firmware:r140
Honeywell » Controledge Rtu Firmware » Version: r150

cpe:2.3:o:honeywell:controledge_rtu_firmware:r150
Honeywell » Controledge Rtu Firmware » Version: r151

cpe:2.3:o:honeywell:controledge_rtu_firmware:r151