CVE-2017-9969

An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.

Score

CVSS 3.0 6.7 Medium

Status

Modified - cybersecurity@se.com

Published

2018-02-12

Last modified

2024-09-16

Weaknesses

CWE-522

Affected products

• Igss Mobile (Schneider-electric)

References

• http://www.securityfocus.com/bid/103046
• https://ics-cert.us-cert.gov/advisories/ICSA-18-046-03
• https://www.schneider-electric.com/en/download/document/SEVD-2018-039-02/