High ICSA-17-089-01 3 CVEs

Schneider Electric Wonderware InTouch Access Anywhere

Published Mar 30, 2017 · Updated Mar 30, 2017

Vendor: Schneider Electric Product: Wonderware InTouch Access Anywhere

Summary

ATTENTION: Remotely Exploitable/low skill level to exploit

Vulnerabilities 3

Unscored —

CVE-2017-5156

A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.…

Apr 20, 2017
Unscored —

CVE-2017-5158

An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 a…

Apr 20, 2017
Unscored —

CVE-2017-5160

An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, versio…

Apr 20, 2017

Revision history

2017-03-30 #1
ICSA-17-089-01 Schneider Electric Wonderware InTouch Access Anywhere

References

ICS Advisory ICSA-17-089-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-089-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-089-01