Aveva Wonderware Intouch Access Anywhere vulnerabilities
3 vulnerabilities
Known vulnerabilities in Aveva Wonderware Intouch Access Anywhere, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-5160avevawonderware_intouch_access_anywhere
EPSS score0.55%
An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly.CVE-2017-5158avevawonderware_intouch_access_anywhereEPSS score2.42%
An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified.CVE-2017-5156avevawonderware_intouch_access_anywhereEPSS score0.96%
A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user.