Description
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could cause an attacker to execute unauthorized commands when a system’s default password credentials have not been changed on first use. The default username is not displayed correctly in the WebHMI interface.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schneider Electric WebHMI – Deployed with EcoStruxure Power Automation System
Default version status: unaffected
WebHMI v4.1.0.0 and prior when deployed with EPAS User Interface 2.6.30.19 and prioraffected