CVE-2015-1009: InduSoft Web Studio

Low severity, CVSS 1.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.

Affected products

• InduSoft Web Studio: up to and including 7.1.3.5
• Wonderware Intouch: up to and including 7.1

Published 2015-08-01. Last modified 2026-06-17.