Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2012-1977

WellinTech KingSCADA Missing Encryption of Sensitive Data

Description

WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WellinTech KingSCADA

Default version status: unaffected

  • 3.0affected

References