Vulnerability Details CVE-2015-3962
Schneider Electric StruxureWare Building Expert MPM before 2.15 does not use encryption for the client-server data stream, which allows remote attackers to discover credentials by sniffing the network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.3%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2015-3962
-
cpe:2.3:a:schneider-electric:struxureware_building_expert_multi-purpose_management:*