PT-2015-6361 · Schneider Electric · Struxureware Building Expert Mpm

Artyom Kurbatov · Publicado 2015-09-18 · Atualizado 2022-02-02 · CVE-2015-3962

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Schneider Electric StruxureWare Building Expert MPM versions prior to 2.15

Description The issue concerns the lack of encryption for the client-server data stream, allowing remote attackers to discover credentials by sniffing the network.

Recommendations For versions prior to 2.15, update to version 2.15 or later to enable encryption for the client-server data stream.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2015-3962

Produtos afetados

Struxureware Building Expert Mpm

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-3962 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-258-01 · Nota
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-254-01 · Aviso do Fabricante