CVE-2014-2381CWE-326
Schneider Electric Wonderware Inadequate Encryption Strength
Low · published August 28, 2014
What it is
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.
The record
Technical detail
- CVSS v2.0
- 2.1 · LOW
- Vector
- AV:L/AC:L/Au:N/C:P/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00145 · 3.4th percentile
- Weakness
- CWE-326 · Inadequate Encryption Strength
- Published
- 2014-08-28T01:00Z
EPSS history
Timeline