PT-2014-4667 · Schneider Electric · Wonderware Information Server (Wis) Portal

Aleksey Osipov + 1 · Publicado 2014-08-28 · Atualizado 2025-11-01 · CVE-2014-2381

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5

Description The issue concerns the use of weak encryption in the software, allowing local users to access sensitive information by reading a credential file.

Recommendations For versions 4.0 SP1 through 5.5, update to a version that uses strong encryption to protect credential files.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2014-2381

Produtos afetados

Wonderware Information Server (Wis) Portal

Referências · 5

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json · Nota
• https://cisa.gov/news-events/ics-advisories/icsa-14-238-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2381 · Nota de Segurança
• https://t.me/cveNotify/141218 · Publicação no Telegram
• https://ics-cert.us-cert.gov/advisories/ICSA-14-238-02 · Nota