CVE-2017-9968

Publication date

2018-02-12 23:00:00

Family

schneider

State

PUBLISHED

Description

A security misconfiguration vulnerability exists in Schneider Electrics IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.