CVE-2017-9637CWE-319

Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases

published May 18, 2018

CVSS
—
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity to those databases is configured to use a SQL user name and password, an attacker may be able to sniff details from the connection string. Schneider Electric recommends that users of Ampla MES versions 6.4 and prior should upgrade to Ampla MES version 6.5 as soon as possible.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.5th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2018-05-18T13:00Z
EPSS history
Timeline
  • 18 MAY 13:00Z
    Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases
    cvelistv5