A provisioning script used for installing engineering workstations sets a single, hard‑coded VNC password. This flaw is a classic example of using hard‑coded credentials (CWE‑1392, CWE‑798). Because every workstation receives the same password, an attacker who obtains or guesses the credential can attach to the VNC service and gain remote control of the workstation, potentially accessing any data or executing commands on the machine.

All engineering workstations built with ANDRITZ 250 SCALA or HIPASE‑250 that use the supplied provisioning script are affected. The CVE record does not specify individual firmware or software versions, so any model that relies on this script is considered vulnerable.

The CVSS score of 8.1 indicates a high impact vulnerability. The EPSS score of < 1% suggests a low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, an attacker with adjacent‑network access and knowledge of the hard‑coded credential can immediately gain VNC access, a clear remote attack vector inferred from the description.