CVE-2022-26077
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.
Se presenta una vulnerabilidad de transmisión de texto sin cifrar de información confidencial en la funcionalidad OAS Engine configuration communications de Open Automation Software OAS Platform versión V16.00.0112. Un ataque de sniffing de red dirigido puede conllevar a una divulgación de información confidencial. Un atacante puede olfatear el tráfico de red para desencadenar esta vulnerabilidad
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-03-14 CVE Reserved
- 2022-05-25 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-16 First Exploit
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-319: Cleartext Transmission of Sensitive Information
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1490 | 2024-09-16 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Openautomationsoftware Search vendor "Openautomationsoftware" | Oas Platform Search vendor "Openautomationsoftware" for product "Oas Platform" | 16.00.0112 Search vendor "Openautomationsoftware" for product "Oas Platform" and version "16.00.0112" | - |
Affected
|