Schneider Electric Igss Mobile vulnerabilities

2 CVEs affecting Schneider Electric Igss Mobile, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9969, published 2018-02-12.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-9968, published 2018-02-12. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection…
• CVE-2017-9969, published 2018-02-12. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in…