CVE-2017-5160

CVE-2017-5160 describes an Inadequate Encryption Strength vulnerability affecting Schneider Electric Wonderware InTouch Access Anywhere versions 11.5.2 and prior. The software fails to properly verify SSL certificates when establishing Transport Layer Security connections, leaving it susceptible to man-in-the-middle attacks. With a CVSS score of 5.3 (Medium), this vulnerability can be exploited remotely with high attack complexity, potentially leading to high confidentiality impact without affecting integrity or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, though it has received some community discussion and media coverage.