EG
Product
Ecostruxure Geo Scada Expert 2020
9
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add Ecostruxure Geo Scada Expert 2020 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-28219 | 7.8 | Dec 11 | A CWE-522: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Geo SCADA Expert 2019 (Original release and Monthly Updates to September 2020, from 81.7268.1… Affected: 83.7551.1 through 83.7578.1 |
| CVE-2023-22611 | 7.5 | Jan 31 | A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server… Affected: 83.7551.1; 83.7578.1; 83.7613.1; 83.7641.1; 83.7692.1; 83.7717.1; +16 more |
| CVE-2023-22610 | 7.5 | Jan 31 | A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the… Affected: 83.7551.1; 83.7578.1; 83.7613.1; 83.7641.1; 83.7692.1; 83.7717.1; +16 more |
| CVE-2022-24321 | 7.5 | Feb 9 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed… Affected: All versions, or not specified |
| CVE-2022-24318 | 7.5 | Feb 9 | A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used Affected: All versions, or not specified |
| CVE-2021-22741 | 6.7 | May 26 | Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure… Affected: through 83.7742.1 |
| CVE-2022-24320 | 5.9 | Feb 9 | A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA database server are… Affected: All versions, or not specified |
| CVE-2022-24319 | 5.9 | Feb 9 | A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA web server are… Affected: All versions, or not specified |
| CVE-2023-0595 | 5.3 | Feb 24 | A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA… Affected: 83.7551.1; 83.7578.1; 83.7613.1; 83.7641.1; 83.7692.1; 83.7717.1; +16 more |
Showing 9