Skip to content
OpenAdvisories
High · 7.8 CVE-2014-2380 EUVD-2014-2417GHSA-vv4r-292w-968p

Schneider Electric Wonderware Inadequate Encryption Strength

Published Aug 28, 2014 · Updated Oct 31, 2025 · Assigned by icscert

Vendor: Schneider Electric Product: Wonderware Information Server Portal Category: ICS / OT

Description

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.

Affected products

VendorProductAffectedFixed
Schneider Electric Wonderware Information Server Portal 4.0 SP1, 4.5, 5.0, 5.5 —

Advisories 1

References