N/A

​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain the plaintext password by using a memory viewer.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

明文存储口令

Ovarro TBox RTUs 安全漏洞

Ovarro TBox RTUs是德国Ovarro公司的一个模块化远程监控和自动化解决方案。 Ovarro TBox RTUs存在安全漏洞，该漏洞源于加密密码以明文形式存储在内存中。攻击者利用该漏洞可以获取敏感信息。

N/A

N/A