What’s Vulnerable › Vulnerabilities

CVE-2017-5155

• Severity: high (CVSS 7.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-13 · updated 2026-06-17
• Weakness: CWE-1188

Description

An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier. Wonderware Historian creates logins with default passwords, which can allow a malicious entity to compromise Historian databases. In some installation scenarios, resources beyond those created by Wonderware Historian may be compromised as well.

Affected products

• Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier: 2014_r2_sp1_p01

References

• http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000115/
• http://www.securityfocus.com/bid/95766
• http://www.securitytracker.com/id/1037808
• https://ics-cert.us-cert.gov/advisories/ICSA-17-024-01
• http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000115/
• http://www.securityfocus.com/bid/95766
• http://www.securitytracker.com/id/1037808
• https://ics-cert.us-cert.gov/advisories/ICSA-17-024-01

Get alerted when CVE-2017-5155 or the next vulnerability affects your stack