CVE-2022-0835: AVEVA System Platform Cleartext Storage of Sensitive Information in Memory

Reference Links

• https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-007.pdf
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-02
• https://www.cisa.gov/news-events/ics-advisories/icsa-22-067-02 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-22-067-02

Frequently Asked Questions

• What is CVE-2022-0835?

  CVE-2022-0835 is a vulnerability in AVEVA System Platform 2020 that allows access to sensitive information stored in cleartext.

• How severe is CVE-2022-0835?

  CVE-2022-0835 has a severity rating of 5.5, which is considered high.

• How does CVE-2022-0835 impact AVEVA System Platform 2020?

  CVE-2022-0835 allows an attacker or a low-privileged user to access sensitive information stored in cleartext in AVEVA System Platform 2020.

• How can I fix CVE-2022-0835?

  To fix CVE-2022-0835, it is recommended to apply the necessary patches or updates provided by AVEVA.

• Are there any references for CVE-2022-0835?

  Yes, you can find references for CVE-2022-0835 at the following links: [link1](https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-007.pdf), [link2](https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-02).