CVE:CVE-2015-0998
CNNVD:CNNVD-201503-617
Schneider Electric InduSoft Web Studio和InTouch Machine Edition都是法国施耐德电气（Schneider Electric）公司的嵌入式HMI软件包。该产品为HMI客户端提供读取、写入标签和事件监控功能。
Schneider Electric InduSoft Web Studio 7.1.3.4 SP3 Patch 4之前版本和InTouch Machine Edition 2014 7.1.3.4 SP3 Patch 4之前版本中存在安全漏洞，该漏洞源于程序传输明文证书。远程攻击者可通过嗅探网络利用该漏洞获取敏感信息。
solution:Upgrade aveva aveva_edge to a higher version than 7.1.3.4,and avoid the version (,7.1.3.4); Upgrade schneider-electric wonderware_intouch_2014 to a higher version than 7.1.3.4,and avoid the version (,7.1.3.4)