CVE-2014-2380
HighSummary
Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5 uses weak encryption, allowing remote attackers to obtain sensitive information by reading a credential file.
Risk Assessment
Weak encryption exposes the organization to the risk of credential data leakage, potentially leading to unauthorized access to systems.
Recommendation
It is recommended to upgrade to the latest version of the software that improves encryption mechanisms and data security.
Other vulnerabilities in Schneider Electric Wonderware Information Server (WIS) Portal
See all- CVE-2014-5399High
CVE-2014-5399 is an SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
- CVE-2014-5397High
The XSS vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.
Original NVD description (English source)
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.