CVEvulnerability

CVE-2012-1977

7.1 HIGH Published 2012-05-09 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-05-09
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.1 HIGH — AV:N/AC:M/Au:N/C:C/I:N/A:N
CVSS 2.0 ([email protected]): 7.1 HIGH — AV:N/AC:M/Au:N/C:C/I:N/A:N
Weaknesses: CWE-255, CWE-311

Description

WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.

Affected configurations

• wellintech kingview 3.0

Weakness · not in database (1)

CWE-255

Weakness · CWE (1)

CWE-311 Missing Encryption of Sensitive Data weakness

References

https://www.cisa.gov/news-events/ics-advisories/icsa-12-129-01 www.cisa.gov
http://dsecrg.com/pages/vul/show.php?id=405 dsecrg.com
http://www.us-cert.gov/control_systems/pdf/ICSA-12-129-01.pdf Third Party Advisory, US Government Resource