Plaintext Password Storage in CONPROSYS HMI System by Contec

CVE-2023-28713

What is CVE-2023-28713?

The CONPROSYS HMI System by Contec contains a vulnerability where sensitive account information is stored in plaintext within a local file. This issue affects versions prior to 3.5.3 and allows any user with access to the PC to easily retrieve or modify the database information. This underscores a significant risk to data integrity and confidentiality within systems utilizing the affected versions.

References