Cleartext Credential Transmission in Schneider Electric InduSoft Web Studio and InTouch Machine Edition
CVE-2015-0998

Currently unrated

Key Information:

Vendor: Schneider Electric
Status: Wonderware Intouch 2014; Aveva Edge
Vendor: CVE Published:; 29 March 2015

🔔 Create Schneider Electric Vulnerability Alert

What is CVE-2015-0998?

Schneider Electric's InduSoft Web Studio and InTouch Machine Edition prior to specified versions are susceptible to a vulnerability that allows the transmission of cleartext credentials. This weakness permits remote unauthenticated attackers to eavesdrop on the network, potentially compromising sensitive information and leading to unauthorized access. It underscores the necessity for robust security measures, including encryption, to safeguard credential transmission over networks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch