CVE-2022-24318
A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cybersecurity@se.com
- Published
- 2022-02-09
- Last modified
- 2024-08-03
- Weaknesses
- CWE-326
Affected products
- Clearscada (Schneider-electric)
- Ecostruxure Geo Scada Expert 2019 (Schneider-electric)
- Ecostruxure Geo Scada Expert 2020 (Schneider-electric)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05