Description
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.
Advisories 1
- ICSA-15-211-01 Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Password Storage Vulnerability CISA ICS & IT advisories · Jun 6, 2025