CVE-2022-2967 — Prosys OPC / UA Simulation Server

CVE-2022-2967

Prosys OPC / UA Simulation Server PUBLISHED

Description (CNA)

Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not sufficiently protect credentials, which could allow an attacker to obtain user credentials and gain access to system data.

Affected (CNA)

Vendor / product	Versions
Prosys OPC / UA Simulation Server	affected 0 before 5.3.0-64
Prosys OPC / UA Modbus Server	affected 0 through 1.4.18-5

CWE

CWE-522

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-01
https://www.prosysopc.com/blog/#Security

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-01
https://www.prosysopc.com/blog/#Security

CISA-ADP

No English description supplied.

No references supplied.