Schneider Electric Patches Easily Exploitable Bugs in HMI Products

There are a series of vulnerabilities related to credentials and authentication in two of Schneider Electric’s HMI products, and an attacker who exploits them may be able to run arbitrary code. The bugs lie in Schneider’s InduSoft Web Studio and InTouch Machine Edition products, both of which are...

PT-2015-14: Password Access in Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014

The specialists of the Positive Research center have detected a Password Access vulnerability in Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014. Systems do not encrypt user passwords, which allows attackers to access them. How to fix Update your system up to the latest...