https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:09:58 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-05674 cnvd-2018-05674 https://cve.radiocsirt.org/vuln/cnvd-2018-05674 https://cve.radiocsirt.org/vuln/euvd-2026-183452 EUVD-2026-183452 https://cve.radiocsirt.org/vuln/euvd-2026-183452 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9968 <p>A security misconfiguration vulnerability exists in Schneider Electric&#39;s IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.</p> <p>A security misconfiguration vulnerability exists in Schneider Electric&#39;s IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9968 https://cve.radiocsirt.org/vuln/ghsa-w8xw-59hx-9h9r <p>A security misconfiguration vulnerability exists in Schneider Electric&#39;s IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.</p> <p>A security misconfiguration vulnerability exists in Schneider Electric&#39;s IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.</p> https://cve.radiocsirt.org/vuln/ghsa-w8xw-59hx-9h9r https://cve.radiocsirt.org/vuln/gsd-2017-9968 gsd-2017-9968 https://cve.radiocsirt.org/vuln/gsd-2017-9968 https://cve.radiocsirt.org/vuln/icsa-18-046-03 <p>IGSS Mobile app lacks certificate pinning during the TLS/SSL connection establishing process. This issue could allow an attacker to execute a man-in-the-middle attack. CVE-2017-9968 has been assigned to this vulnerability. A CVSS v3 base score of 6.4 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N). IGSS Mobile app passwords are stored in clear-text in the configuration file. CVE-2017-9969 has been assigned to this vulnerability. A CVSS v3 base score of 6.0 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).</p> <p>IGSS Mobile app lacks certificate pinning during the TLS/SSL connection establishing process. This issue could allow an attacker to execute a man-in-the-middle attack. CVE-2017-9968 has been assigned to this vulnerability. A CVSS v3 base score of 6.4 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N). IGSS Mobile app passwords are stored in clear-text in the configuration file. CVE-2017-9969 has been assigned to this vulnerability. A CVSS v3 base score of 6.0 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).</p> https://cve.radiocsirt.org/vuln/icsa-18-046-03