Emerson OpenBSI

CPE Details

Emerson OpenBSI
emerson
openbsi
-
2022-08-03
12h28 +00:00
2022-10-06
11h55 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:emerson:openbsi:-:*:*:*:*:*:*:*

Informations

Vendor

emerson

Product

openbsi

Version

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-29959 2022-08-16
10h23 +00:00		 Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users are stored insecurely in the SecUsers.ini file by using a simple string transformation rather than a cryptographic mechanism.
5.5
Medium
CVE-2022-29960 2022-07-26
19h14 +00:00		 Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. DES with hardcoded cryptographic keys is used for protection of certain system credentials, engineering files, and sensitive utilities.
5.5
Medium