7.8
CVE-2014-2380
- EPSS 0.14%
- Veröffentlicht 28.08.2014 01:55:03
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginSchneider Electric Wonderware Inadequate Encryption Strength
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Invensys ≫ Wonderware Information Server Version4.0 Updatesp1
Invensys ≫ Wonderware Information Server Version4.0 Updatesp1 SwEditionportal
Invensys ≫ Wonderware Information Server Version4.5 Update- Editionportal
Invensys ≫ Wonderware Information Server Version5.0 Update- Editionportal
Invensys ≫ Wonderware Information Server Version5.5 SwEditionportal
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.345 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:C/I:N/A:N
|
| ics-cert@hq.dhs.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:C/I:N/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.