CVE-2022-2569: ARC Informatique PcVue

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-08-24 · updated 2026-07-09
Weakness: CWE-312

Description

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users

Affected products

arcinfo PcVue: before 12.0.27; from 15 through 15.2.2 — fixed in 12.0.27

How to fix

Upgrade to a fixed version: arcinfo PcVue 12.0.27. Check the vendor advisory for mitigations.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0
https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0

Get alerted when CVE-2022-2569 or the next vulnerability affects your stack