medium5.0
CVE-2015-3962
Schneider Electric StruxureWare Building Expert MPM before 2.15 does not use encryption for the client-server data stream, which allows remote attackers to dis…
Impact
Schneider Electric StruxureWare Building Expert MPM before 2.15 does not use encryption for the client-server data stream, which allows remote attackers to discover credentials by sniffing the network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Struxureware Building Expert Multi-Purpose Management | before 2.15 |