Code injection

2014-09-1810:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm.

CPENameOperatorVersion
clearscadaeq2010 r3
clearscadaeq2010 r3.1
clearscadaeq2013 r1
clearscadaeq2013 r1.1
clearscadaeq2013 r1.1a
clearscadaeq2013 r1.2
clearscadaeq2013 r2
scada_expert_clearscadaeq2014 r1
scada_expert_clearscadaeq2013 r2.1

Name	Operator	Version
clearscada	eq	2010 r3
clearscada	eq	2010 r3.1
clearscada	eq	2013 r1
clearscada	eq	2013 r1.1
clearscada	eq	2013 r1.1a
clearscada	eq	2013 r1.2
clearscada	eq	2013 r2
scada_expert_clearscada	eq	2014 r1
scada_expert_clearscada	eq	2013 r2.1

References

ics-cert.us-cert.gov/advisories/ICSA-14-259-01