PT-2019-1308 · Unknown · Iiot Monitor

Rgod · Published 2019-01-14 · Updated 2019-06-07 · CVE-2018-7839

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIoT Monitor version 3.1.38

Description A cryptographic issue exists in the software, which could allow information disclosure due to errors in the use of cryptography. This could enable an attacker to disclose protected information.

Recommendations For IIoT Monitor version 3.1.38, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

BDU:2019-00573

CVE-2018-7839

ZDI-19-031

Affected Products

Iiot Monitor

References · 6

• https://schneider-electric.com/en/download/document/SEVD-2018-354-03 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7839 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7839 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-031 · Security Note
• https://bdu.fstec.ru/vul/2019-00573 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-008-02 · Note