Medium ICSA-18-046-03 2 CVEs

Schneider Electric IGSS Mobile

Published Feb 15, 2018 · Updated Feb 15, 2018

Vendor: Schneider Electric Product: IGSS Mobile for Android Product: IGSS Mobile for iOS

Summary

ATTENTION: Locally exploitable/low skill level to exploit.

Vulnerabilities 2

Unscored —

CVE-2017-9968

A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prio…

Feb 12, 2018
Unscored —

CVE-2017-9969

An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. …

Feb 12, 2018

Revision history

2018-02-15 #1
ICSA-18-046-03 Schneider Electric IGSS Mobile

References

ICS Advisory ICSA-18-046-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-046-03
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/