Multiple vulnerabilities in Schneider Electric products

Description

Multiple serious vulnerabilities have been found in Schneider Electric products. Malicious users can exploit these vulnerabilities to obtain sensitive information orbypass security restrictions.

Below is a complete list of vulnerabilities

1. Improper credentials storing and transmitting can be exploited locally via file manipulations or network sniffing;
2. Publication list of usernames can be exploited remotely via conducting brute-force attack.

Original advisories

• SE bulletin

• SE bulletin

Related products

• InduSoft-Web-Studio

CVE list

• CVE-2015-0996
  warning
• CVE-2015-0999
  warning
• CVE-2015-0997
  critical
• CVE-2015-0998
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com