ARC Informatique PcVue (Update A)

Summary

Vulnerabilities 1

• Medium 5.5
  CVE-2022-2569

  ARC Informatique PcVue

  The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users

  ARC Informatique PcVue 15 OAuth web service configuration PcVue 12 OAuth web service configuration
  Aug 24, 2022

Revision history

1. 2022-09-29 #2

   ARC Informatique PcVue (Update A)

2. 2022-08-23 #1

   ARC Informatique PcVue (Update A)

References

• ICS Advisory ICSA-22-235-01 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-22-235-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/news-events/ics-advisories/icsa-22-235-01
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf