Description
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WellinTech | KingSCADA | 3.0 | — |
Advisories 1
- ICSA-12-129-01 WellinTech KingSCADA Insecure Password Encryption CISA ICS & IT advisories · Jun 6, 2025