arcinfo PcVue up to 12.0.0/15.2.13/16.3.3 WebVue/WebScheduler/TouchVue/Snapvue weak authentication

Summaryinfo

A vulnerability identified as problematic has been detected in arcinfo PcVue up to 12.0.0/15.2.13/16.3.3. This affects an unknown part of the component WebVue/WebScheduler/TouchVue/Snapvue. This manipulation causes weak authentication. This vulnerability is registered as CVE-2026-1693. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in arcinfo PcVue up to 12.0.0/15.2.13/16.3.3. It has been declared as problematic. Affected by this vulnerability is some unknown functionality of the component WebVue/WebScheduler/TouchVue/Snapvue. The manipulation with an unknown input leads to a weak authentication vulnerability. The CWE definition for the vulnerability is CWE-1390. The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct. As an impact it is known to affect confidentiality. The summary by CVE is:

The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in version 12.0.0 through 16.3.3 included despite being deprecated. It might allow a remote attacker to steal user credentials.

The advisory is shared at pcvue.com. This vulnerability is known as CVE-2026-1693 since 01/30/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• arcinfo

Name

• PcVue

Version

• 12.0
• 15.2.0
• 15.2.1
• 15.2.2
• 15.2.3
• 15.2.4
• 15.2.5
• 15.2.6
• 15.2.7
• 15.2.8
• 15.2.9
• 15.2.10
• 15.2.11
• 15.2.12
• 15.2.13
• 16.3.0
• 16.3.1
• 16.3.2
• 16.3.3

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion