CVE-2015-3962

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 19-09-2015 12:59

Last modified: - 02-02-2022 03:07

Total changes: - 2

Description

Schneider Electric StruxureWare Building Expert MPM before 2.15 does not use encryption for the client-server data stream, which allows remote attackers to discover credentials by sniffing the network.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

Low

Confidentiality

None

Integrity

Privileges required

Scope

User interaction

5.0

Base score

10.0

2.9

Exploitability score

Impact score

Verification logic

vendor=schneider-electric AND product=struxureware_building_expert_multi-purpose_management AND versionEndExcluding=2.15

Reference

https://ics-cert.us-cert.gov/advisories/ICSA-15-258-01
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-254-01

Keywords

CVE-2015-3962

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2015-3962

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures