What’s Vulnerable › Vulnerabilities

CVE-2024-21869: Plaintext Storage of a Password in Rapid SCADA

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-02 · updated 2026-06-17
• Weakness: CWE-256

Description

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them.

Affected products

• Rapid Software LLC Rapid SCADA: through 5.8.4

References

• https://rapidscada.org/contact/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
• https://rapidscada.org/contact/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03

Get alerted when CVE-2024-21869 or the next vulnerability affects your stack