CVE-2014-5412

Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.

Score

CVSS 2.0 6.4 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2014-09-18

Last modified

2025-11-04

Weaknesses

CWE-264, CWE-287

Affected products

• Clearscada (Aveva)
• Scada Expert Clearscada (Schneider-electric)
• Clearscada (Schneider Electric)
• Scada Expert Clearscada (Schneider Electric)

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a
• https://ics-cert.us-cert.gov/advisories/ICSA-14-259-01