CVEs-PoC/2017/CVE-2017-9968.md

CVE-2017-9968

Description

A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon