CVE-2014-2381

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1–5.5 is affected by CVE-2014-2381 due to inadequate encryption strength (CWE-326). The vulnerability allows local users to obtain sensitive information by reading a credential file, with a local access requirement and no authent...

CVE-2014-2380

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1–5.5 is affected by Inadequate Encryption Strength (CWE-326). The vulnerability arises from weak encryption of credential data, enabling remote attackers to read a credential file and obtain sensitive information. Some sources a...

PT-2014-4667

Name of the Vulnerable Software and Affected Versions Schneider Electric Wonderware Information Server WIS Portal versions 4.0 SP1 through 5.5 Description The issue concerns the use of weak encryption in the software, allowing local users to access sensitive information by reading a credential...

PT-2014-4666

Name of the Vulnerable Software and Affected Versions Schneider Electric Wonderware Information Server WIS Portal versions 4.0 SP1 through 5.5 Description The issue allows remote attackers to obtain sensitive information by reading a credential file due to the use of weak encryption...

CVE-2014-2381: Inadequate Encryption Strength

Schneider Electric Wonderware Information Server WIS Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file...

CVE-2014-2380: Inadequate Encryption Strength

Schneider Electric Wonderware Information Server WIS Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file...