Multiple vulnerabilities in Schneider Electric products

Beschreibung

Multiple serious vulnerabilities have been found in Schneider Electric products. Malicious users can exploit these vulnerabilities to obtain sensitive information orbypass security restrictions.

Below is a complete list of vulnerabilities

1. Improper credentials storing and transmitting can be exploited locally via file manipulations or network sniffing;
2. Publication list of usernames can be exploited remotely via conducting brute-force attack.

Ursprüngliche Informationshinweise

• SE bulletin

• SE bulletin

CVE Liste

• CVE-2015-0996
  warning
• CVE-2015-0999
  warning
• CVE-2015-0997
  warning
• CVE-2015-0998
  warning

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com