CVE-2015-3962

MEDIO 5.0CVE-2015-3962 · Published 18/09/2015 · updated 17/06/2026

In breve

CVE-2015-3962 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda struxureware building expert multi-purpose management (schneider-electric).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 68.2% delle vulnerabilità.
Correzione: aggiornare a 2.15 o successiva.

Package	Affected versions	Patched versions
struxureware building expert multi-purpose management schneider-electric	`< 2.15`	`2.15`

Description

Schneider Electric StruxureWare Building Expert MPM before 2.15 does not use encryption for the client-server data stream, which allows remote attackers to discover credentials by sniffing the network.

References

download.schneider-electric.com/files · Broken Link
ics-cert.us-cert.gov/advisories/ICSA-15-258-01 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free