CVE-2017-9969

Опубликовано: 12 фев. 2018

Источник: nvd

CVSS3: 6.7

CVSS2: 2.1

EPSS Низкий

Описание

An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.

Ссылки

http://www.securityfocus.com/bid/103046
Third Party Advisory
VDB Entry
Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03
Third Party Advisory
US Government Resource
https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/
Vendor Advisory
http://www.securityfocus.com/bid/103046
Third Party Advisory
VDB Entry
Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03
Third Party Advisory
US Government Resource
https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:schneider-electric:igss_mobile:*:*:*:*:*:android:*:*

Версия до 3.01 (включая)

cpe:2.3:a:schneider-electric:igss_mobile:*:*:*:*:*:iphone_os:*:*

Версия до 3.01 (включая)

EPSS

Процентиль: 23%

0.00078

Низкий

6.7 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-522

Связанные уязвимости

GHSA-rq73-574j-8g3v