Skip to content
OpenAdvisories
High · 7.5 CVE-2022-26077 EUVD-2022-30645GHSA-f48x-hvc8-qr9c

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open…

Published May 25, 2022 · Updated Apr 15, 2025 · Assigned by talos

Vendor: Open Automation Software Product: OAS Platform

Description

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Open Automation Software OAS Platform V16.00.0112 —

References