CVE-2021-42699

Summary

The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account.

Affected Software

Weaknesses

• CWE-319: CWE-319 Cleartext Transmission of Sensitive Information

Workarounds

Users are discouraged from using documents from unknown/untrusted sources. Users are encouraged to store .ctl files in a folder only writeable by admin-level users. Users are encouraged to operate in “Safe Mode” when loading documents that have been out of their control. Users are encouraged to apply a document editing password to their documents. Users should avoid using the Real Time Web-Connect menu items and instead connect to DAQConnect using script.

ADP Enrichment

CVE Program Container

Additional References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02

• ←Previous
• Next→