https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:23:51.263861+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-22831 cnvd-2017-22831 2026-10-08T18:23:51.269187+00:00 cnvd-2017-22831 https://cve.radiocsirt.org/vuln/euvd-2026-178711 EUVD-2026-178711 2026-10-08T18:23:51.269230+00:00 EUVD-2026-178711 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9637 fkie_cve-2017-9637 2026-10-08T18:23:51.269259+00:00

Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity to those databases is configured to use a SQL user name and password, an attacker may be able to sniff details from the connection string. Schneider Electric recommends that users of Ampla MES versions 6.4 and prior should upgrade to Ampla MES version 6.5 as soon as possible.

 https://cve.radiocsirt.org/vuln/ghsa-95r6-hq2x-fm98 GHSA-95r6-hq2x-fm98 2026-10-08T18:23:51.269306+00:00

Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity to those databases is configured to use a SQL user name and password, an attacker may be able to sniff details from the connection string. Schneider Electric recommends that users of Ampla MES versions 6.4 and prior should upgrade to Ampla MES version 6.5 as soon as possible.

 https://cve.radiocsirt.org/vuln/gsd-2017-9637 gsd-2017-9637 2026-10-08T18:23:51.269339+00:00 gsd-2017-9637 https://cve.radiocsirt.org/vuln/icsa-17-187-05 ICSA-17-187-05 — Schneider Electric Ampla MES 2026-10-08T18:23:51.269362+00:00

Ampla MES provides capability to interact with data from third party databases. When connectivity to those databases is configured to use a SQL user name and password, an attacker may be able to sniff details from the connection string.Note that when the third party database connectivity is configured with Windows Integrated Security as opposed to SQL username and password, the software is not vulnerable. Ampla MES provides capability to configure users and their privileges. When Ampla MES users are configured to use Simple Security, a weakness in the password hashing algorithm could be exploited to reverse the user 's password.CVE-2017-9637 has been assigned to this vulnerability. A CVSS v3 base score of 6.7 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).