CVE-2015-1009: Infoleak
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1009?
CVE-2015-1009 has a medium severity rating due to its potential for local users to access sensitive information.
How do I fix CVE-2015-1009?
To fix CVE-2015-1009, upgrade InduSoft Web Studio to version 7.1.3.5 Patch 5 or Wonderware InTouch Machine Edition to 7.1 SP3 Patch 4.
Who is affected by CVE-2015-1009?
CVE-2015-1009 affects users of InduSoft Web Studio versions prior to 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition versions up to 7.1 SP3 Patch 4.
What kind of information is at risk with CVE-2015-1009?
CVE-2015-1009 allows local users to obtain sensitive information stored in cleartext, specifically project-window passwords.
Is there a known exploit for CVE-2015-1009?
While exploitation of CVE-2015-1009 is possible, there are no publicly known exploits specifically targeting this vulnerability.