Vulnerability Details CVE-2014-2380
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.5%
CVSS Severity
CVSS v2 Score 7.8
References
Products affected by CVE-2014-2380
-
cpe:2.3:a:invensys:wonderware_information_server:4.0
-
cpe:2.3:a:invensys:wonderware_information_server:4.5
-
cpe:2.3:a:invensys:wonderware_information_server:5.0
-
cpe:2.3:a:invensys:wonderware_information_server:5.5