https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:27:47.431963+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-05158 cnvd-2017-05158 2026-10-06T22:27:47.435984+00:00 cnvd-2017-05158 https://cve.radiocsirt.org/vuln/euvd-2026-73147 EUVD-2026-73147 2026-10-06T22:27:47.436016+00:00 EUVD-2026-73147 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5160 fkie_cve-2017-5160 2026-10-06T22:27:47.436030+00:00

An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly.

 https://cve.radiocsirt.org/vuln/ghsa-mp37-3w38-3hmx GHSA-mp37-3w38-3hmx 2026-10-06T22:27:47.436058+00:00

An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly.

 https://cve.radiocsirt.org/vuln/gsd-2017-5160 gsd-2017-5160 2026-10-06T22:27:47.436075+00:00 gsd-2017-5160 https://cve.radiocsirt.org/vuln/icsa-17-089-01 ICSA-17-089-01 — Schneider Electric Wonderware InTouch Access Anywhere 2026-10-06T22:27:47.436085+00:00

The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user.CVE-2017-5156 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified.CVE-2017-5158 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated by Schneider Electric; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). The software will connect via Transport Layer Security without verifying the peer 's SSL certificate properly.CVE-2017-5160 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).