Vulnerabilities > CVE-2019-10981 - Credentials Management vulnerability in Schneider-Electric Citectscada and Scada Expert Vijeo Citect

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
schneider-electric
CWE-255

Summary

In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials.

Common Weakness Enumeration (CWE)