VULNERABILITY INTELLIGENCE

CVE-2017-9969

CVSS score6.7 MEDIUM

EPSS probability0.40%

CISA KEVNot currently listed

Published2018-02-12

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.

Weakness classification

CWE-522: Insufficiently Protected Credentials

Primary references

cybersecurity@se.com — Third Party Advisory, VDB Entry, Vendor Advisory
cybersecurity@se.com — Third Party Advisory, US Government Resource
cybersecurity@se.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory