Multiple vulnerabilities in Schneider Electric products

Описание

Multiple serious vulnerabilities have been found in Schneider Electric products. Malicious users can exploit these vulnerabilities to obtain sensitive information orbypass security restrictions.

Below is a complete list of vulnerabilities

1. Improper credentials storing and transmitting can be exploited locally via file manipulations or network sniffing;
2. Publication list of usernames can be exploited remotely via conducting brute-force attack.

Первичный источник обнаружения

• SE bulletin
  SE bulletin
  

Связанные продукты

• InduSoft-Web-Studio

Список CVE

• CVE-2015-0996
  warning
• CVE-2015-0999
  warning
• CVE-2015-0997
  critical
• CVE-2015-0998
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com