A security misconfiguration vulnerability exists in Schneider Electrics IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Igss_mobile | Schneider-electric | * | 3.01 (including) |