CVE-2024-21869mediumCWE-256

CVE-2024-21869: medium-severity vulnerability in Rapid SCADA

Plaintext Storage of a Password in Rapid SCADA

Published · Updated

Follow this CVE+ Monitor Rapid SCADA

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.2epss 0.2%
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Rapid Software LLC · Rapid SCADA
Related CVEs — Rapid SCADA

In the same product, most dangerous first.

CVE-2024-21852HIGHRapid SCADA Path TraversalEPSS 1.2%CVE-2024-21764CRITICALUse of Hard-Coded Credentials in Rapid SCADAEPSS 0.6%CVE-2024-22096MEDIUMRelative Path Traversal in Rapid SCADAEPSS 0.6%CVE-2024-21866MEDIUMGeneration of Error Message Containing Sensitive Information in Rapid SCADAEPSS 0.4%CVE-2024-21794MEDIUMOpen Redirect in Rapid SCADAEPSS 0.3%CVE-2024-22016HIGHIncorrect Permission Assignment for Critical Resource in Rapid SCADAEPSS 0.2%