CVE-2024-21764

Summary

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port.

Affected Software

Weaknesses

• CWE-798: CWE-798 Use of Hard-coded Credentials

Workarounds

Rapid Software did not respond to CISA's attempts at coordination. Users of Rapid SCADA are encouraged to contact Rapid Software and keep their systems up to date.

ADP Enrichment

CVE Program Container

Additional References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
• https://rapidscada.org/contact/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
• https://rapidscada.org/contact/

• ←Previous
• Next→