Veille CVE

‹ Retour à la liste

CVE-2026-50110

9.2 Critique

Publiée le 01/07/2026 à 01:17 · Modifiée le 01/07/2026 à 20:17 · Analyse NVD reportée · Source : ics-cert@hq.dhs.gov

Description

Storage Concentrator (SC & SCVM) contains hardcoded credentials for numerous internal services embedded within a configuration file. While the credentials are stored in an encoded format, the encoding can be reversed to plaintext. The exposed credentials span a broad range of internal services, including database accounts, licensing, replication services, and third-party integrations, meaning successful exploitation of this vulnerability could provide an attacker with unauthorized access to multiple interconnected systems.

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
4.0 9.3 Critique ics-cert@hq.dhs.gov CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
3.1 9.2 Critique ics-cert@hq.dhs.gov CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Faiblesses (CWE)

Références

Ailleurs