Vulnerabilities > Aveva > Aveva Edge

DATE CVE VULNERABILITY TITLE RISK
2015-03-29 CVE-2015-0999 Information Exposure vulnerability in multiple products
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file.
local
low complexity
aveva schneider-electric CWE-200
2.1
2015-03-29 CVE-2015-0998 Information Exposure vulnerability in multiple products
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
3.3
2015-03-29 CVE-2015-0997 Information Exposure vulnerability in multiple products
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 provide an HMI user interface that lists all valid usernames, which makes it easier for remote attackers to obtain access via a brute-force password-guessing attack.
network
low complexity
aveva schneider-electric CWE-200
5.0
2015-03-29 CVE-2015-0996 Information Exposure vulnerability in multiple products
Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 rely on a hardcoded cleartext password to control read access to Project files and Project Configuration files, which makes it easier for local users to obtain sensitive information by discovering this password.
local
low complexity
aveva schneider-electric CWE-200
2.1