CVE-2015-0996 - CVE House
Back to Database
Status published Low CVE-2015-0996

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4...

Vulnerability Description

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 rely on a hardcoded cleartext password to control read access to Project files and Project Configuration files, which makes it easier for local users to obtain sensitive information by discovering this password.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-0996

Credits & Attribution

No credits recorded in the NVD database.

References

More from aveva

View All →
CVE-2021-42797
Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio)...
High 7.5
CVE-2021-42796
An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly...
Unknown 0
CVE-2021-42794
An issue was discovered in AVEVA Edge (formerly InduSoft Web...
Medium 5.3
CVE-2015-0999
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4...
Low 2.1
CVE-2015-0998
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4...
Low 3.3

Affected Vendor

Affected Software

aveva edge, wonderware intouch 2014
Vulnerable Versions:
0

Timeline

Official Publish: March 29th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.