CVE-2024-21869— Plaintext Storage of a Password in Rapid SCADA
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-21869
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Plaintext Storage of a Password in Rapid SCADA
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
明文存储口令
Source: NVD (National Vulnerability Database)
Vulnerability Title
Rapid Software Rapid SCADA 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Rapid Software Rapid SCADA是Rapid Software公司的一个开源的工业自动化平台。 Rapid Software Rapid SCADA 5.8.4及之前版本存在安全漏洞，该漏洞源于将明文凭据存储在不同的位置，导致具有本地访问权限的攻击者可以查看明文凭据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rapid Software LLC | Rapid SCADA | 0 ~ 5.8.4 | - |
II. Public POCs for CVE-2024-21869
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-21869
请登录查看更多情报信息。
Same Patch Batch · Rapid Software LLC · 2024-02-01 · 7 CVEs total
| CVE-2024-21764 | 9.8 CRITICAL | Use of Hard-Coded Credentials in Rapid SCADA |
| CVE-2024-21852 | 8.8 HIGH | Rapid SCADA Path Traversal |
| CVE-2024-22016 | 7.8 HIGH | Incorrect Permission Assignment for Critical Resource in Rapid SCADA |
| CVE-2024-22096 | 6.5 MEDIUM | Relative Path Traversal in Rapid SCADA |
| CVE-2024-21794 | 5.4 MEDIUM | Open Redirect in Rapid SCADA |
| CVE-2024-21866 | 5.3 MEDIUM | Generation of Error Message Containing Sensitive Information in Rapid SCADA |
IV. Related Vulnerabilities
Same product: Rapid SCADA
- CVE-2024-21866
Generation of Error Message Containing Sensitive Information - CVE-2024-21764
Use of Hard-Coded Credentials in Rapid SCADA - CVE-2024-21794
Open Redirect in Rapid SCADA - CVE-2024-22016
Incorrect Permission Assignment for Critical Resource in Rap - CVE-2024-22096
Relative Path Traversal in Rapid SCADA
Same vendor: Rapid Software LLC
- CVE-2024-21866
Generation of Error Message Containing Sensitive Information - CVE-2024-21764
Use of Hard-Coded Credentials in Rapid SCADA - CVE-2024-21794
Open Redirect in Rapid SCADA - CVE-2024-22016
Incorrect Permission Assignment for Critical Resource in Rap - CVE-2024-22096
Relative Path Traversal in Rapid SCADA
V. Comments for CVE-2024-21869
No comments yet