PT-2020-12255

Name of the Vulnerable Software and Affected Versions ControlEdge PLC versions R130.2, R140, R150, and R151 ControlEdge RTU versions R101, R110, R140, R150, and R151 Description The issue concerns the exposure of unencrypted passwords on the network. This occurs due to a problem where passwords a...

PT-2020-12252

Name of the Vulnerable Software and Affected Versions ControlEdge PLC versions R130.2, R140, R150, and R151 ControlEdge RTU versions R101, R110, R140, R150, and R151 Description The issue concerns the exposure of a session token on the network. This affects ControlEdge PLC and RTU devices,...

CVE-2020-10624: Cleartext Transmission of Sensitive Information

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes a session token on the network...

CVE-2020-10628: Cleartext Transmission of Sensitive Information

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes unencrypted passwords on the network...

Honeywell ControlEdge PLC and RTU

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Honeywell Equipment: ControlEdge PLC and RTU Vulnerabilities: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...