Lucene search
This script is Copyright (C) 2015-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SCADA_INDUSOFT_WEB_STUDIO_SEVD_2015-100-01.NBINHistoryAug 14, 2015 - 12:00 a.m.
Schneider Electric InduSoft Web Studio < 7.1.3.5 Local Plaintext Password Information Disclosure (SEVD-2015-100-01)
2015-08-1400:00:00
This script is Copyright (C) 2015-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10
According to its self-reported version, the Schneider Electric InduSoft Web Studio software running on the remote host is prior to 7.1.3.5. It is, therefore, affected by an information disclosure vulnerability due to passwords for project windows being stored as plaintext in configuration files. A local attacker can exploit this to gain access to access to sensitive information.
Binary data scada_indusoft_web_studio_SEVD_2015-100-01.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider_electric | indusoft_web_studio | cpe:/a:schneider_electric:indusoft_web_studio |