Unscored CVE-2020-9404 EUVD-2020-30224GHSA-jv87-phf9-vqrx

In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no …

Published Aug 11, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no knowledge of the current passwords.

Advisories 2

VDE-2020-017 Pepperl+Fuchs, PACTware: Two password vulnerabilities found CERT@VDE · May 22, 2025
SEVD-2020-224-08 Schneider Electric PACTware Schneider Electric CPCERT · Aug 13, 2020

References

https://pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf