CVE-2022-29960
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. DES with hardcoded cryptographic keys is used for protection of certain system credentials, engineering files, and sensitive utilities.
Emerson OpenBSI versiones hasta 29-04-2022, usa una criptografía débil. Es un entorno de ingeniería para la línea de RTUs ControlWave y Bristol Babcock. Es usado DES con claves criptográficas embebidas para la protección de determinadas credenciales del sistema, archivos de ingeniería y utilidades confidenciales.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-04-29 CVE Reserved
- 2022-07-26 CVE Published
- 2024-02-16 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-798: Use of Hard-coded Credentials
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03 | Not Applicable | |
| https://www.cisa.gov/uscert/ics/advisories/icsa-22-221-03 | Third Party Advisory | |
| https://www.forescout.com/blog | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Emerson Search vendor "Emerson" | Openbsi Search vendor "Emerson" for product "Openbsi" | < 5.9 Search vendor "Emerson" for product "Openbsi" and version " < 5.9" | - |
Affected
| ||||||
| Emerson Search vendor "Emerson" | Openbsi Search vendor "Emerson" for product "Openbsi" | 5.9 Search vendor "Emerson" for product "Openbsi" and version "5.9" | - |
Affected
| ||||||
| Emerson Search vendor "Emerson" | Openbsi Search vendor "Emerson" for product "Openbsi" | 5.9 Search vendor "Emerson" for product "Openbsi" and version "5.9" | sp1 |
Affected
| ||||||
| Emerson Search vendor "Emerson" | Openbsi Search vendor "Emerson" for product "Openbsi" | 5.9 Search vendor "Emerson" for product "Openbsi" and version "5.9" | sp2 |
Affected
| ||||||
| Emerson Search vendor "Emerson" | Openbsi Search vendor "Emerson" for product "Openbsi" | 5.9 Search vendor "Emerson" for product "Openbsi" and version "5.9" | sp3 |
Affected
| ||||||