Lucene search
HistoryFeb 02, 2024 - 12:15 a.m.
CVE-2024-21764
nvd
cve-2024-21764
rapid software llc
rapid scada
security vulnerability
hard-coded credentials
unauthorized access
software security
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.1%
In Rapid Software LLC’s Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port.
Affected configurations
Node
rapidscadarapid_scadaRange≤5.8.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| rapidscada:rapid_scada | rapidscada rapid scada | le | 5.8.4 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Rapid SCADA",
"vendor": "Rapid Software LLC",
"versions": [
{
"lessThanOrEqual": "5.8.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
CVE-2024-21764 Use of Hard-Coded Credentials in Rapid SCADA
2024-02-01 23:28:32
nvd
nvd
CVE-2024-21764
2024-02-02 00:15:54
prion
prion
Hardcoded credentials
2024-02-02 00:15:00
ics
ics
Rapid Software LLC Rapid SCADA
2024-01-11 12:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.1%
Related for CVE-2024-21764