Schneider Electric ClearSCADA
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-0595 | All Versions | A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious p | MEDIUM 5.3 | 0.4 % | ||
| CVE-2014-5413 | 2010 R3 (build 72.4560) ; 2010 R3.1 (build 72.4644) | Schneider Electric SCADA Expert ClearSCADA Cryptographic Issues | MEDIUM 6.4 | 1.0 % | ||
| CVE-2014-5412 | 2010 R3 (build 72.4560) ; 2010 R3.1 (build 72.4644) | Schneider Electric SCADA Expert ClearSCADA Improper Authentication | MEDIUM 6.4 | 1.6 % | ||
| CVE-2014-5411 | 2010 R3 (build 72.4560) ; 2010 R3.1 (build 72.4644) | Schneider Electric SCADA Expert ClearSCADA Cross-site Scripting | MEDIUM 4.9 | 1.3 % | ||
| CVE-2014-0779 | 2010 R2 (build 71.4165) ; 2010 R2.1 (build 71.4325) ; 2010 R3 (build 72.4560) ; … | Schneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory Buffer | MEDIUM 6.8 | 1.5 % |