CVE-2022-45124

Name of the Vulnerable Software and Affected Versions WellinTech KingHistorian version 35.01.00.05

Description An information disclosure issue exists in the User authentication functionality. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this issue.

Recommendations For WellinTech KingHistorian version 35.01.00.05, consider restricting access to the network to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of the User authentication functionality to reduce the risk of sensitive information disclosure. At the moment, there is no information about a newer version that contains a fix for this issue.