Vulnerability in Honeywell Controledge Plc
CVE-2020-10628
ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network.
EPSS: 0.007 (51.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Honeywell Controledge_plc
- Honeywell Controledge_plc_firmware — versions r130.2, r140, r150
- Honeywell Controledge_rtu
- Honeywell Controledge_rtu_firmware — versions r101, r110, r140
- N/a Controledge Plc — versions R130.2, R140, R150
- N/a Controledge Rtu — versions R101, R110, R140
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-10628?
- CVE-2020-10628 is a high-severity vulnerability in Honeywell Controledge Plc, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.5/10. Published 2020-06-26.
- How severe is CVE-2020-10628?
- High severity. CVSS v3 base score is 7.5 out of 10.