CVE-2022-29960

Katalog CVE

CVSS 5.5 · Medium EPSS 0,49%

Kerentanan Use of Hard-coded Credentials pada emerson openbsi. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. DES with hardcoded cryptographic keys is used for protection of certain system credentials, engineering files, and sensitive utilities.

Rincian

Terbit di NVD

26 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03 not applicable · advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-221-03 advisory pihak ketiga · pemerintah AS
• https://www.forescout.com/blog/ advisory pihak ketiga