---
cve: "CVE-2024-21869"
severity: "MEDIUM"
cvss: 6.2
epss: "16%"
vendor: "Rapid Software LLC"
kev: false
exploited: false
published: "2024-02-02 00:15:55"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-16T18:24:04+02:00"
---

# CVE-2024-21869

> 6.2 MEDIUM

## Beschreibung

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Keine | good |
| A Verfügbarkeit | Keine | good |

## Referenzen

- <https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03>
- <https://rapidscada.org/contact/>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2024-21869) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_