CVE-2017-5158

CVE-2017-5158 is an Information Exposure vulnerability affecting Schneider Electric Wonderware InTouch Access Anywhere, versions 11.5.2 and prior. This flaw allows credentials to be exposed to external systems through specific URL parameters, as arbitrary destination addresses can be specified. It carries a critical CVSS score of 9.8, indicating a severe risk with network-based exploitation, low attack complexity, and high impact on confidentiality, integrity, and availability. While the vulnerability is critical, there is no evidence of active exploitation, and no public exploit code or Metasploit modules are available. Community discussion and media coverage are minimal, suggesting limited public awareness or active targeting.