This script is Copyright (C) 2012-2014 Tenable Network Security, Inc.
The remote Windows host contains an application that stores passwords
According to its version, the instance of WellinTech KingSCADA
installed on the remote Windows host stores passwords in an
obfuscated, but not hashed format. This may enable attackers with
access to a KingSCADA project, either locally through the filesystem
or remotely though DCOM, to retrieve the passwords and use them in
See also :
Upgrade to the new version referenced in the advisory.
Risk factor :
High / CVSS Base Score : 7.8
CVSS Temporal Score : 6.4
Public Exploit Available : true
Nessus Plugin ID: 59502 ()
Bugtraq ID: 51582
CVE ID: CVE-2012-1977
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.