Clearscada (Schneider-electric) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2023-02-24. Vendor: Schneider-electric.

CVEs of Clearscada

• CVE-2023-0595 - CVSS 5.3 (medium), 2023-02-24: A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to…
• CVE-2022-24320 - CVSS 5.9 (medium), 2022-02-09: A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo…
• CVE-2022-24319 - CVSS 5.9 (medium), 2022-02-09: A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo…
• CVE-2022-24318 - CVSS 7.5 (high), 2022-02-09: A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the…
• CVE-2022-24321 - CVSS 7.5 (high), 2022-02-09: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when…
• CVE-2021-22741 - CVSS 6.7 (medium), 2021-05-26: Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all…
• CVE-2019-6854 - CVSS 7.8 (high), 2020-01-06: A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -with initial releases before 1 January…
• CVE-2017-6021 - CVSS 7.5 (high), 2018-05-14: In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build…