CVE:CVE-2015-1009
CNNVD:CNNVD-201507-833
Schneider Electric InduSoft Web Studio和Wonderware InTouch Machine Edition都是法国施耐德电气（Schneider Electric）公司的一个嵌入式HMI软件包。
Schneider Electric InduSoft Web Studio 7.1.3.5 Patch 5之前版本和Wonderware InTouch Machine Edition 7.1 SP3 Patch 4及之前版本中存在安全漏洞，该漏洞源于程序使用明文存储project-window密码。本地攻击者可通过读取文件利用该漏洞获取敏感信息。
solution:Upgrade indusoft web_studio to a higher version than 7.1.3.5,and avoid the version (,7.1.3.5]; Upgrade wonderware intouch to a higher version than *:sp3,and avoid the version *:sp3