CVE-2015-1009

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.

• CWE-200

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-100-01Vendor Advisory
• https://gcsresource.invensys.com/support/docs/_securitybulletins/Security_bulletin_LFSEC00000110.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-15-211-01Third Party Advisory, US Government Resource
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-100-01Vendor Advisory
• https://gcsresource.invensys.com/support/docs/_securitybulletins/Security_bulletin_LFSEC00000110.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-15-211-01Third Party Advisory, US Government Resource

Published

Aug 1, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10084A vulnerability was found in irontec klear-library chloe and…9.8
• CVE-2015-10085A vulnerability was found in GoPistolet. It has been declare…7.5
• CVE-2015-10086A vulnerability, which was classified as critical, was found…9.8
• CVE-2015-10087** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been fou…8.8
• CVE-2015-10088A vulnerability, which was classified as critical, was found…8.1
• CVE-2015-10089A vulnerability classified as problematic has been found in …6.1
• CVE-2015-10090A vulnerability, which was classified as problematic, has be…6.1
• CVE-2015-10091A vulnerability has been found in ByWater Solutions bywater-…7.2
• CVE-2015-10092A vulnerability was found in Qtranslate Slug Plugin up to 1.…6.1
• CVE-2015-10093A vulnerability was found in Mark User as Spammer Plugin 1.0…5.4
• CVE-2015-10094A vulnerability was found in Fastly Plugin up to 0.97 on Wor…6.1
• CVE-2015-10095A vulnerability classified as problematic has been found in …6.1