CVE-2024-21869 MEDIUM

CVE-2024-21869: Plaintext Storage of a Password in Rapid SCADA

Vendor Rapid Software Llc

Product Rapid SCADA

Weakness CWE-256

Published February 1, 2024

Last update May 15, 2025

View on NVD All CVEs

CVSS base score

6.2/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them.

Key dates

02Disclosure timeline

February 1, 2024 CVE published

May 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-21869 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/256.html