CVE-2017-5155 : What You Need to Know

A vulnerability has been identified in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier versions, allowing malicious individuals to exploit default passwords for unauthorized access.

Understanding CVE-2017-5155

What is CVE-2017-5155?

This CVE pertains to a security flaw in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier versions, where default passwords are generated, potentially leading to unauthorized access to Historian databases.

The Impact of CVE-2017-5155

The vulnerability could compromise the security of Historian databases and other resources in specific installation setups beyond those created by Wonderware Historian.

Technical Details of CVE-2017-5155

Vulnerability Description

Wonderware Historian creates logins with default passwords, enabling malicious entities to compromise databases.

Affected Systems and Versions

Product: Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier
Versions: Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier

Exploitation Mechanism

The issue arises from the generation of default passwords by the software, which can be exploited by attackers to gain unauthorized access.

Mitigation and Prevention

Immediate Steps to Take

Change all default passwords immediately to strong, unique ones
Implement multi-factor authentication where possible
Regularly monitor and audit access to Historian databases

Long-Term Security Practices

Conduct regular security training for staff on password best practices
Keep software and systems up to date with the latest security patches

Patching and Updates

Ensure that all systems running Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier are updated with the latest patches to address this vulnerability.