CVE-2017-8371 Information disclosure in n/a
Remote attackers can obtain sensitive password information from cleartext RAM storage in Schneider Electric StruxureWare Data Center Expert.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-8371?
CVE-2017-8371 is a medium-severity vulnerability in n/a, published on 30 Apr 2017. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via unspecified vectors.
Weakness: CWE-522
Which versions are affected by CVE-2017-8371?
It affects 1 product.
Products include Schneider-Electric Struxureware Data Center Expert.
How do I fix CVE-2017-8371?
No fix has been published for CVE-2017-8371 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-8371 being exploited?
There is no known exploitation of CVE-2017-8371 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2021-22794 Path traversal in StruxureWare Data Center Expert
- CVE-2021-22795 Command injection in StruxureWare Data Center Expert
- CVE-2023-37196 SQL injection in StruxureWare Data Center Expert
- CVE-2023-37197 SQL injection in StruxureWare Data Center Expert
- CVE-2023-25547 Missing authorization in StruxureWare Data Center Expert
Sources
Also known as GHSA-q3f6-hqpp-mv3w.