CVE-2017-9635CWE-326

Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges

published May 18, 2018

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are configured to use Simple Security, a weakness in the password hashing algorithm could be exploited to reverse the user's password. Schneider Electric recommends that users of Ampla MES versions 6.4 and prior should upgrade to Ampla MES version 6.5 as soon as possible.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2018-05-18T13:00Z
EPSS history
Timeline
  • 18 MAY 13:00Z
    Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges
    cvelistv5