CVE-2015-1009

Name of the Vulnerable Software and Affected Versions Schneider Electric InduSoft Web Studio versions prior to 7.1.3.5 Patch 5 Wonderware InTouch Machine Edition versions prior to 7.1 SP3 Patch 5

Description The issue allows local users to obtain sensitive information by reading a file due to the use of cleartext for project-window password storage.

Recommendations For Schneider Electric InduSoft Web Studio versions prior to 7.1.3.5 Patch 5, update to version 7.1.3.5 Patch 5 or later. For Wonderware InTouch Machine Edition versions prior to 7.1 SP3 Patch 5, update to version 7.1 SP3 Patch 5 or later.