What is the CVSS score of CVE-2015-1010?

CVE-2015-1010 has a CVSS 2.0 base score of 4.9 (Medium). CVSS vector: AV:L/AC:L/Au:N/C:C/I:N/A:N. EPSS exploitation probability: 0.0%.

Rsview32 CVE-2015-1010

MEDIUM

Cryptographic Issues (CWE-310)

2015-05-31 ics-cert@hq.dhs.gov

Rockwell Information Disclosure Rsview32

4.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.9 MEDIUM

AV:L/AC:L/Au:N/C:C/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:N/C:C/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

May 31, 2015 - 17:59 cve.org

MEDIUM 4.9

DescriptionCVE.org

Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earlier does not properly encrypt credentials, which allows local users to obtain sensitive information by reading a file and conducting a decryption attack.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-310. Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earlier does not properly encrypt credentials, which allows local users to obtain sensitive information by reading a file and conducting a decryption attack. Affected products include: Rockwellautomation Rsview32.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.