Skip to content
OpenAdvisories
Unscored CVE-2015-0998 EUVD-2015-1006GHSA-g465-mm63-2p8q

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit clea…

Published Mar 29, 2015 · Updated Aug 6, 2024 · Assigned by icscert

Description

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

Advisories 1

References