Description
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | InTouch | unspecified – ≤ 2020 R2 | — |
Advisories 1
- ICSA-21-159-03 AVEVA InTouch CISA ICS & IT advisories · Jun 8, 2021