Advisories · Technology
ANDRITZ 250 SCALA.
Every CVE that names ANDRITZ 250 SCALA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Use of hard-coded VNC credentials in the engineering-workstation provisioning
- ANDRITZ HIPASE-250
- ANDRITZ 250 SCALA
- Hard-coded credentials
- CWE-1392
- CVSS 5.3 Medium
Missing authentication for logging-configuration endpoint
- ANDRITZ HIPASE-250
- ANDRITZ 250 SCALA
- Broken access control
- Authentication bypass
- CVSS 7.5 High
Missing authentication and permissive CORS policy
- ANDRITZ HIPASE-250
- ANDRITZ 250 SCALA
- Authentication bypass
- CWE-942
- CVSS 7.5 High
Storage of passwords in a reversible format
- ANDRITZ HIPASE-250
- ANDRITZ 250 SCALA
- Weak cryptography or TLS
- CWE-257