Read the docs
TI-2026-46519 Aliases CVE-2026-65313GHSA-jjwc-g6g3-rhhx

Use of hard-coded VNC credentials in the engineering-workstation provisioning

Priority LOW 37CWE-1392Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the password can gain VNC access to affected workstations.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00266 18th percentileScored 2026-11-07
Fix Fixed HIPASE-250 (ANDRITZ): 8.15250 SCALA (ANDRITZ): 8.15

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ANDRITZHIPASE-250up to 7.208.15Patch availableCNA
ANDRITZ250 SCALAup to 7.208.15Patch availableCNA
  • HIPASE-250 VendorANDRITZ Affected up to 7.20 Fixed in 8.15 Patch available CNA
  • 250 SCALA VendorANDRITZ Affected up to 7.20 Fixed in 8.15 Patch available CNA

Remediation

  • Fix · CNA HIPASE-250 (ANDRITZ) Fixed in 8.15
  • Fix · CNA 250 SCALA (ANDRITZ) Fixed in 8.15

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-65313
  2. 2026-10-03 Alias added: GHSA-jjwc-g6g3-rhhx

References

Other 1

  • TI-2026-46517 Missing authentication and permissive CORS policy CVSS 3.1HIGH 7.5
  • TI-2026-46516 Storage of passwords in a reversible format CVSS 3.1HIGH 7.5
  • TI-2026-46518 Missing authentication for logging-configuration endpoint CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences