ID
VAR-201702-1091
TITLE
Schneider Electric StruxureWare Data Center Expert Product Password Leak Vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2017-00817
DESCRIPTION
StruxureWare Data Center Expert is a DCIM (Data Center Infrastructure Management) solution designed to monitor infrastructure including security, power and environment. Schneider Electric StruxureWare Data Center Expert product has a password disclosure vulnerability. The cause of this vulnerability is that StruxureWare data center user passwords are stored in clear text, allowing attackers to use the vulnerability to obtain sensitive information.
Trust: 0.6
sources:
CNVD: CNVD-2017-00817
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2017-00817
AFFECTED PRODUCTS
| vendor: | schneider | model: | electric struxureware data center expert | scope: | lte | version: | <=7.3.1 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-00817
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2017-00817
PATCH
| title: | Patch for Schneider Electric StruxureWare Data Center Expert Product Password Leak Vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/88521 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-00817
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2017-00817 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-00817
REFERENCES
| url: | http://www.securityweek.com/schneider-data-center-monitoring-product-leaks-passwords?from=singlemessage&isappinstalled=0 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-00817
SOURCES
| db: | CNVD | id: | CNVD-2017-00817 |
LAST UPDATE DATE
2022-05-04T09:51:38.337000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2017-00817 | date: | 2017-02-04T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2017-00817 | date: | 2017-02-04T00:00:00 |