First published: Fri Jun 10 2016(Updated: )
ABB PCM600 before 2.7 improperly stores PCM600 authentication credentials, which allows local users to obtain sensitive information via unspecified vectors.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
ABB PCM600 | <=2.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-4527 is classified as a medium-severity vulnerability due to improper storage of authentication credentials.
To fix CVE-2016-4527, upgrade ABB PCM600 to version 2.7 or later to ensure secure storage of authentication credentials.
CVE-2016-4527 affects ABB PCM600 versions prior to 2.7.
CVE-2016-4527 can be exploited by local users who gain access to the system to retrieve sensitive authentication information.
Currently, there are no known workarounds for CVE-2016-4527, and updating the software is recommended.