Schneider-electric

Igss Mobile

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2017-9968

  • EPSS 0.16%
  • Published 12.02.2018 23:29:00
  • Last modified 21.11.2024 03:37:16

A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attac...

6.7

CVE-2017-9969

  • EPSS 0.08%
  • Published 12.02.2018 23:29:00
  • Last modified 21.11.2024 03:37:16

An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.