CVE-2017-5155

2017-02-1321:00:00

icscert

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

73.6%

JSON

An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier. Wonderware Historian creates logins with default passwords, which can allow a malicious entity to compromise Historian databases. In some installation scenarios, resources beyond those created by Wonderware Historian may be compromised as well.

CNA Affected

[
  {
    "product": "Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier"
      }
    ]
  }
]