A cleartext storage of sensitive information vulnerability exists in PcVue...
Vulnerability Description
A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service (SMS) accounts configuration files to discover the associated simple mail transfer protocol (SMTP) account credentials and the SIM card PIN code. Successful exploitation of this vulnerability could allow an unauthorized user access to the underlying email account and SIM card.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4312
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- ARC Informatique
References
More from ARC Informatique
View All →Affected Vendor
ARC Informatique
View all reports →