Vulnerability Details CVE-2022-0835
AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.1%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 1.9
References
- https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-007.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-02
- https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-007.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-02
Products affected by CVE-2022-0835
-
cpe:2.3:a:aveva:system_platform:2020