title: Plaintext Storage of a Password in Rapid SCADA
description: In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them.
problem types: CWE-256 Plaintext Storage of a Password
affected:
{
defaultStatus: unaffected
product: Rapid SCADA
vendor: Rapid Software LLC
versions:
lessThanOrEqual: 5.8.4, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
workarounds: Rapid Software did not respond to CISA's attempts at coordination. Users
of Rapid SCADA are encouraged to contact Rapid Software and keep their
systems up to date.