CVE-2017-9968

CVE-2017-9968 describes a security misconfiguration vulnerability in Schneider Electric's IGSS Mobile application versions 3.01 and prior. The lack of certificate pinning during TLS/SSL connection establishment allows for a man-in-the-middle (MitM) attack. This medium-severity vulnerability (CVSS 5.9) has a network-based attack vector with high attack complexity, potentially leading to high confidentiality impact without affecting integrity or availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, though it has received some media coverage.