medium6.8
CVE-2017-8371
Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitiv…
Impact
Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Struxureware Data Center Expert | through 7.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2016-343-01
- http://www.datacenterdynamics.com/content-tracks/security-risk/schneider-patches-critical-vulnerability-in-struxureware-dcim/97738.fullarticle
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2016-343-01
- http://www.datacenterdynamics.com/content-tracks/security-risk/schneider-patches-critical-vulnerability-in-struxureware-dcim/97738.fullarticle