NVD

Id
46029  
Name
CVE-2012-4693  
Description
Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by reading this file.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-12-18  
Modified Date
2012-12-19  
Seq
2012-4693  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231115 46029 CVE-2012-4693 http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-370812.pdf  View
231116 46029 CVE-2012-4693 http://www.us-cert.gov/control_systems/pdf/ICSA-12-348-01.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30053 JVNDB-2012-005760 Invensys Wonderware InTouch および Siemens ProcessSuite におけるパスワードを発見される脆弱性 Invensys Wonderware InTouch および Siemens ProcessSuite は、Ps_security.ini のデータに対して脆弱な暗号化アルゴリズムを使用するため、パスワードを発見される脆弱性が存在します。 CVE-2012-4693 57931 CVE-2012-4693 46029 1.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005760.html 2012-12-11 2012-12-20 View