CVE-2019-6525 | BDVDB-2026-115149 Detail

AVEVAWonderware System Platform

Description#

AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and inter-node communications. A user with low privileges could make use of an API to obtain the credentials for this account.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-522 Insufficiently Protected Credentials

References#

https://ics-cert.us-cert.gov/advisories/ICSA-19-029-03
https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec135.pdf

Exploit#

No public exploit known

History#

Version 12019-04-11Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.