CL
Product
Clearscada
8
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Clearscada to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-6854 | 7.8 | Jan 6 | A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -with initial releases before 1 January 2019- which could… Affected: 2017; 2017; 2017 |
| CVE-2022-24321 | 7.5 | Feb 9 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed… Affected: All versions, or not specified |
| CVE-2022-24318 | 7.5 | Feb 9 | A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used Affected: All versions, or not specified |
| CVE-2017-6021 | 7.5 | May 14 | In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build 77.5882) and prior,… Affected: 2014; 2014; 2015; 2015 |
| CVE-2021-22741 | 6.7 | May 26 | Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure… Affected: All versions, or not specified |
| CVE-2022-24320 | 5.9 | Feb 9 | A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA database server are… Affected: All versions, or not specified |
| CVE-2022-24319 | 5.9 | Feb 9 | A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA web server are… Affected: All versions, or not specified |
| CVE-2023-0595 | 5.3 | Feb 24 | A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA… Affected: All versions, or not specified |
Showing 8