Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-2967

Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not sufficiently protect credentials, which could allow an attacker t

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not sufficiently protect credentials, which could allow an attacker to obtain user credentials and gain access to system data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Prosys OPC UA Simulation Server

Default version status: unaffected

  • 0 to < 5.3.0-64affected

Prosys OPC UA Modbus Server

Default version status: unaffected

  • 0 to ≤ 1.4.18-5affected

References