CVE-2022-30266

Description

Communications between an engineer's browser and the PLC Web UI are unprotected. User credentials are hashed by client-side Javascript.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-01

Details

Source: Mitre, NVD