CVE-2022-4312

State: Published
Severity: 5.5 Medium
Published: Dec 12, 2022
Updated: Apr 14, 2025
Reserved: Dec 6, 2022

Description

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service (SMS) accounts configuration files to discover the associated simple mail transfer protocol (SMTP) account credentials and the SIM card PIN code. Successful exploitation of this vulnerability could allow an unauthorized user access to the underlying email account and SIM card.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	icscert

Weaknesses

CWE-312 Cleartext Storage of Sensitive Information

Affected Products

Product	Versions
PcVueARC Informatique	8.10 through 15.2.3Affected

References

https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1171-security-bulletin-2022-7vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.