Information disclosure

2023-01-3117:15:00

PRIOn knowledge base

www.prio-n.com

information disclosure

ecostruxure

scada expert

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.1%

JSON

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Versions prior to October 2022)

CPENameOperatorVersion
ecostruxure_geo_scada_expert_2019eq81.7268.1
ecostruxure_geo_scada_expert_2019eq81.7322.1
ecostruxure_geo_scada_expert_2019eq81.7429.2
ecostruxure_geo_scada_expert_2019eq81.7457.1
ecostruxure_geo_scada_expert_2019eq81.7488.1
ecostruxure_geo_scada_expert_2019eq81.7522.1
ecostruxure_geo_scada_expert_2019eq81.7545.1
ecostruxure_geo_scada_expert_2019eq81.7578.1
ecostruxure_geo_scada_expert_2019eq81.7613.1
ecostruxure_geo_scada_expert_2019eq81.7641.1

Name	Operator	Version
ecostruxure_geo_scada_expert_2019	eq	81.7268.1
ecostruxure_geo_scada_expert_2019	eq	81.7322.1
ecostruxure_geo_scada_expert_2019	eq	81.7429.2
ecostruxure_geo_scada_expert_2019	eq	81.7457.1
ecostruxure_geo_scada_expert_2019	eq	81.7488.1
ecostruxure_geo_scada_expert_2019	eq	81.7522.1
ecostruxure_geo_scada_expert_2019	eq	81.7545.1
ecostruxure_geo_scada_expert_2019	eq	81.7578.1
ecostruxure_geo_scada_expert_2019	eq	81.7613.1
ecostruxure_geo_scada_expert_2019	eq	81.7641.1

Rows per page:

1-10 of 581

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf