Medium ICSA-17-187-05 2 CVEs

Schneider Electric Ampla MES

Published Jul 6, 2017 · Updated Jul 6, 2017

Vendor: Schneider Electric Product: Ampla MES

Summary

ATTENTION: Low skill level to exploit.

Vulnerabilities 2

Unscored —

CVE-2017-9635

Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are …

Schneider Electric Ampla MES ICS / OT

May 18, 2018
Unscored —

CVE-2017-9637

Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivit…

Schneider Electric Ampla MES ICS / OT

May 18, 2018

Revision history

2017-07-06 #1
ICSA-17-187-05 Schneider Electric Ampla MES

References

ICS Advisory ICSA-17-187-05 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-187-05
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-187-05