CVE-2017-5156

2017-04-2019:00:00

icscert

www.cve.org

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user.

CNA Affected

[
  {
    "product": "Schneider Electric Wonderware InTouch Access Anywhere",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Schneider Electric Wonderware InTouch Access Anywhere"
      }
    ]
  }
]