CVE-2017-8371

2017-04-3020:00:00

mitre

www.cve.org

schneider electric

struxureware

data center expert

vulnerability

password storage

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

41.2%

JSON

Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via unspecified vectors.

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2016-343-01

www.datacenterdynamics.com/content-tracks/security-risk/schneider-patches-critical-vulnerability-in-struxureware-dcim/97738.fullarticle