CVE-2017-5160

MEDIUM

Schneider Electric Wonderware InTouch Access Anywhere < 11.5.2 - Inadequate Encryption Strength

Title source: llm
STIX 2.1

Description

An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97256
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01

Scores

CVSS v3 5.3
EPSS 0.0055
EPSS Percentile 41.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-326
Status published
Products (2)
aveva/wonderware_intouch_access_anywhere < 11.5.2
n/a/Schneider Electric Wonderware InTouch Access Anywhere Schneider Electric Wonderware InTouch Access Anywhere
Published Apr 20, 2017
Tracked Since Feb 18, 2026