NetSight
IP …
low2.1

CVE-2015-0999

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartext OPC User credenti…

Impact

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file.

Affected products

VendorProductAffected versions
AvevaAveva Edge
before 7.1.3.4
Schneider-ElectricWonderware Intouch 2014
before 7.1.3.4

Weakness classification

CWE-200

References