7.8
Not rated
CVE-2014-2380 Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows…
Description
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wonderware Information Server Portal | 5.5 | No fix stated |
| Wonderware Information Server Portal | 5.0 | No fix stated |
| Wonderware Information Server Portal | 4.5 | No fix stated |
Other CVEs of Wonderware Information Server Portal
The 5 CVEs of Wonderware Information Server Portal →
CVE-2014-5398
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read…
2.1
Not rated
CVE-2014-2381
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows…
2.1
Not rated
CVE-2014-5399
SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5…
7.5
Not rated
CVE-2014-5397
Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1…
7.5
Not rated