CWE Code: 255
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Credentials Management
Summary: aveva wonderware system platform 2017 update 2 and prior uses an archestra network user account for authentication of system processes and inter-node communications. a user with low privileges could make use of an api to obtain the credentials for this account.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-04-11
Last Modified Date: 2019-04-12