PT-2014-4667 · Schneider Electric · Wonderware Information Server (Wis) Portal

Aleksey Osipov + 1 · Published 2014-08-28 · Updated 2025-11-01 · CVE-2014-2381

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5

Description The issue concerns the use of weak encryption in the software, allowing local users to access sensitive information by reading a credential file.

Recommendations For versions 4.0 SP1 through 5.5, update to a version that uses strong encryption to protect credential files.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2014-2381

Affected Products

Wonderware Information Server (Wis) Portal

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-2381 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-14-238-02 · Note
• https://t.me/cveNotify/141218 · Telegram Post
• https://ics-cert.us-cert.gov/advisories/ICSA-14-238-02 · Note