CVE-2012-1977
WellinTech KingSCADA Missing Encryption of Sensitive Data
CVE-2012-1977 is a vulnerability (CVSS 7.1) in Wellintech Kingscada, published May 9, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.79%, the 56th percentile. No source names a fixed version.
- Severity
- 7.1 CVSS 2.0, CVE List
- Exploit chance
- 0.79%EPSS, 56th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
Exploit likelihood
Affected products
What each source reports
CVE List Score used
WellinTech KingSCADA Missing Encryption of Sensitive Data
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
- Record
CVE-2012-1977- CVSS 2.0
- 7.1
AV:N/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-311
- Updated
- 2026-11-02
EUVDEUVD-2012-1986
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
- Record
EUVD-2012-1986- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-r54h-4qg8-h76pNo score
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db,...
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
- Record
GHSA-r54h-4qg8-h76p- Weakness
- CWE-311
- Updated
- 2026-11-02
NVD
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
- Record
CVE-2012-1977- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-311, CWE-255
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.