Wonderware Intouch 2014
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider-electric:wonderware_intouch_2014:*:*:*:*:machine:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Wonderware Intouch 2014 (363dbd00-95ee-5667-ab0b-6b258167bc9e) |
| Edition | * |
| Language | * |
| Software edition | machine |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-0999 |
vulnerable | 2026-06-08 05:06:24.454096 |
Details available
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file.
Published: 2015-03-29T10:00:00.000Z
Updated: 2024-08-06T04:26:11.548Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0998 |
vulnerable | 2026-06-08 05:06:24.453677 |
Details available
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
Published: 2015-03-29T10:00:00.000Z
Updated: 2024-08-06T04:26:11.506Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0997 |
vulnerable | 2026-06-08 05:06:24.453342 |
Details available
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 provide an HMI user interface that lists all valid usernames, which makes it easier for remote attackers to obtain access via a brute-force password-guessing attack.
Published: 2015-03-29T10:00:00.000Z
Updated: 2024-08-06T04:26:11.570Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0996 |
vulnerable | 2026-06-08 05:06:24.452910 |
Details available
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 rely on a hardcoded cleartext password to control read access to Project files and Project Configuration files, which makes it easier for local users to obtain sensitive information by discovering this password.
Published: 2015-03-29T10:00:00.000Z
Updated: 2024-08-06T04:26:11.573Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.