Schneider Electric StruxureWare Data Center CVE-2017-8371 Information Disclosure Vulnerability

Bugtraq ID:	98399
Class:	Input Validation Error
CVE:	CVE-2017-8371
Remote:	Yes
Local:	No
Published:	Jan 20 2017 12:00AM
Updated:	May 23 2017 04:25PM
Credit:	Ilya Karpov of Positive Technologies.
Vulnerable:	Schneider-Electric StruxureWare Data Center Expert 7.3.1 Schneider-Electric StruxureWare Data Center Expert 7.2.4 Schneider-Electric StruxureWare Data Center Expert 7.3.1.114
Not Vulnerable:	Schneider-Electric StruxureWare Data Center Expert 7.4

Schneider Electric StruxureWare Data Center CVE-2017-8371 Information Disclosure Vulnerability

Schneider Electric StruxureWare Data Center is prone to an information-disclosure vulnerability.

Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks.

Schneider Electric StruxureWare Data Center 7.3.1 and prior are vulnerable.

Schneider Electric StruxureWare Data Center CVE-2017-8371 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Schneider Electric StruxureWare Data Center CVE-2017-8371 Information Disclosure Vulnerability

References:

• Schneider Electric Homepage (Schneider Electric)
  
• Security Notification �?? StruxureWare Data Center Expert (Schneider Electric)