Approved changes feed: RSS · Atom

cpe:2.3:a:schneider-electric:clearscada:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductClearscada (2965b4ae-d2d4-5fde-a25a-7118e8e0a06b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0595 vulnerable 2026-06-08 05:52:31.995952 Details available
MEDIUM (5.3)
A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)
Published: 2023-02-24T00:00:00.000Z
Updated: 2025-02-05T20:06:14.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24321 vulnerable 2026-06-08 05:41:00.145172 Details available
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Published: 2022-02-09T22:05:12.000Z
Updated: 2024-08-03T04:07:02.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24318 vulnerable 2026-06-08 05:41:00.141656 Details available
A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
Published: 2022-02-09T22:05:09.000Z
Updated: 2024-08-03T04:07:02.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22741 vulnerable 2026-06-08 05:30:01.229814 Details available
Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior), which could cause the revealing of account credentials when server database files are available. Exposure of these files to an attacker can make the system vulnerable to password decryption attacks. Note that “.sde” configuration export files do not contain user account password hashes.
Published: 2021-05-26T19:20:13.000Z
Updated: 2024-08-03T18:51:07.378Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.