CVE-2012-1977
WellinTech KingSCADA Missing Encryption of Sensitive Data
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
Exploit likelihood
What each source reports
CVE List Score used
WellinTech KingSCADA Missing Encryption of Sensitive Data
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
- Record
CVE-2012-1977- CVSS 2.0
- 7.1
AV:N/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-311
- Updated
- 2026-11-02
EUVDEUVD-2012-1986
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
- Record
EUVD-2012-1986- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-r54h-4qg8-h76p No score
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db,...
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
- Record
GHSA-r54h-4qg8-h76p- Weakness
- CWE-311
- Updated
- 2026-11-02
NVD
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
- Record
CVE-2012-1977- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-311, CWE-255
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1977 is a vulnerability (CVSS 7.1) in Wellintech Kingscada, published May 9, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.79%, the 56th percentile. No source names a fixed version.