Multiple Schneider Electric Products CVE-2015-0998 Information Disclosure Vulnerability
BID:73378
Info
Multiple Schneider Electric Products CVE-2015-0998 Information Disclosure Vulnerability
| Bugtraq ID: | 73378 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0998 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 26 2015 12:00AM |
| Updated: | Mar 26 2015 12:00AM |
| Credit: | Gleb Gritsai, Ilya Karpov, and Kirill Nesterov of Positive Technologies Security Lab and Alisa Esage Shevcheckno |
| Vulnerable: |
Schneider-Electric InTouch Machine Edition 2014 7.1.3.2 Schneider-Electric InduSoft Web Studio 7.1.3.2 |
| Not Vulnerable: |
Schneider-Electric InduSoft Web Studio 7.1.3.4 SP 3 Patch 4 |
Discussion
Multiple Schneider Electric Products CVE-2015-0998 Information Disclosure Vulnerability
Multiple Schneider Electric products are prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.
The following products are affected:
InduSoft Web Studio 7.1.3.2 and prior.
InTouch Machine Edition 7.1.3.2 and prior.
Multiple Schneider Electric products are prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.
The following products are affected:
InduSoft Web Studio 7.1.3.2 and prior.
InTouch Machine Edition 7.1.3.2 and prior.
Solution / Fix
Multiple Schneider Electric Products CVE-2015-0998 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.