CVE-2022-26077 is a cleartext transmission of sensitive information vulnerability affecting Open Automation Software OAS Platform V16.00.0112. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to sniff network traffic to disclose sensitive information due to unencrypted configuration communications. While not actively exploited or having public exploit code, it has garnered significant community discussion and media coverage, indicating awareness of its potential impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
16.00.0112CPE matchmatch criteria | cpe:2.3:a:openautomationsoftware:oas_platform:16.00.0112:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.