CVE-2022-0835

Published: Apr 11, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user.

Affected (3)

Products: Aveva: System Platform

1 product

System Platform

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Aveva System Platform	Version 2020
Aveva System Platform	Version 2020 r2_patch01
Aveva System Platform	Version 2020 r2s

Related CWEs

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Cleartext Storage of Sensitive Information in Memory

The product stores sensitive information in cleartext in memory.

References (4)

https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-007.pdf

Source: ics-cert@hq.dhs.gov

Vendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-007.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.