CVE-2017-9635

3.9 lowEPSS 0.2%

Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are configured to use Simple Security, a weakness in the password hashing algorithm could be exploited to reverse the user's password. Schneider Electric recommends that users of Ampla MES versions 6.4 and prior should upgrade to Ampla MES version 6.5 as soon as possible.

Severity

CVSS 3.0

3.9 low

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-326
Published: 2018-05-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

schneider-electric:ampla_manufacturing_execution_system

References

http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000118/
http://www.securityfocus.com/bid/99469
https://ics-cert.us-cert.gov/advisories/ICSA-17-187-05
http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000118/
http://www.securityfocus.com/bid/99469

Check your stack JSON