Skip to content
OpenAdvisories
Low · 2.1 CVE-2014-2381 EUVD-2014-2418GHSA-mmx7-9c9c-w6wv

Schneider Electric Wonderware Inadequate Encryption Strength

Published Aug 28, 2014 · Updated Oct 31, 2025 · Assigned by icscert

Vendor: Schneider Electric Product: Wonderware Information Server Portal Category: ICS / OT

Description

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.

Affected products

VendorProductAffectedFixed
Schneider Electric Wonderware Information Server Portal 4.0 SP1, 4.5, 5.0, 5.5 —

Advisories 1

References