CVE-2014-2380CWE-326

Schneider Electric Wonderware Inadequate Encryption Strength

High · published August 28, 2014

CVSS v2.0
7.8
EPSS
1%
Percentile
54.5
In the wild
Unconfirmed
What it is

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.

The record
Technical detail
CVSS v2.0
7.8 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00752 · 54.5th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2014-08-28T01:00Z
EPSS history
Timeline
  • 28 AUG 01:00Z
    Schneider Electric Wonderware Inadequate Encryption Strength
    cvelistv5