Lucene search

IcscertCVELIST:CVE-2024-21764

HistoryFeb 01, 2024 - 11:28 p.m.

CVE-2024-21764 Use of Hard-Coded Credentials in Rapid SCADA

2024-02-0123:28:32

CWE-798

icscert

www.cve.org

cve-2024-21764

rapid scada

hard-coded credentials

rapid software llc

version 5.8.4

port connection

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

In Rapid Software LLC’s Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Rapid SCADA",
    "vendor": "Rapid Software LLC",
    "versions": [
      {
        "lessThanOrEqual": "5.8.4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

rapidscada.org/contact/

www.cisa.gov/news-events/ics-advisories/icsa-24-011-03

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

Related for CVELIST:CVE-2024-21764