CVE-2017-5160

MITTEL 5.3CVE-2017-5160 · Published 20/04/2017 · updated 17/06/2026

Kurz gesagt

CVE-2017-5160 ist eine Schwachstelle (MITTEL (CVSS 5.3)) in wonderware intouch access anywhere (aveva).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.55%, höher als bei 46.0% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
wonderware intouch access anywhere aveva	`≤ 11.5.2`	No fix yet

Description

An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly.

References

software.schneider-electric.com/pdf/security-bulletin/lfsec00000114 · Vendor Advisory
securityfocus.com/bid/97256 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-17-089-01 · Third Party Advisory

Weitere Schwachstellen in wonderware intouch access anywhere

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free