EUVD-2017-18872

Malware in sbrugna...

EUVD-2017-16942

Malware in sbrugna...

EUVD-2017-16941

Malware in sbrugna...

EUVD-2017-16940

Malware in sbrugna...

EUVD-2017-16939

Malware in sbrugna...

EcoStruxure PowerSCADA Operation Advanced Reporting and Dashboards Module URL Redirection

The vulnerability of the software used for creating control panels for energy management systems, such as EcoStruxure PowerSCADA Operation PSO – Advanced Reporting and Dashboards Module, EcoStruxure PowerOperation EPO – Advanced Reporting and Dashboards Module, and the energy monitoring software...

EcoStruxure PowerSCADA Operation XSS

The vulnerability of the software used for creating control panels for energy management systems, such as EcoStruxure PowerSCADA Operation PSO – Advanced Reporting and Dashboards Module, EcoStruxure PowerOperation EPO – Advanced Reporting and Dashboards Module, and the energy monitoring software...

PT-2023-6876

Name of the Vulnerable Software and Affected Versions EcoStruxure PowerSCADA Operation PSO - Advanced Reporting and Dashboards Module versions affected versions not specified EcoStruxure PowerOperation EPO - Advanced Reporting and Dashboards Module versions affected versions not specified...

PowerSCADA Expert Access Information Disclosure

The vulnerability of the PowerSCADA Expert system for data collection and process control is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain access to user account information...

PT-2019-2665

Name of the Vulnerable Software and Affected Versions Vijeo Citect versions 7.30 through 7.40 CitectSCADA versions 7.30 through 7.40 PowerSCADA Expert affected versions not specified Description The issue is related to insufficient protection of registration data, which may allow an attacker to...

Schneider Electric PowerSCADA Anywhere and Citect Anywhere Cross-Site Request Forgery Vulnerability

Schneider Electric PowerSCADA Anywhere and Citect Anywhere are products of Schneider Electric, France.Schneider Electric PowerSCADA Anywhere is a substation monitoring system. Schneider Electric PowerSCADA Anywhere is a substation monitoring system, PowerSCADA Expert is a data acquisition softwar...

Cross site request forgery (csrf)

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack require...

CVE-2017-9963

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack require...

CVE-2017-9963

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack require...

CVE-2017-9963

Summary: A cross-site request forgery vulnerability exists in the Secure Gateway component of Schneider Electric’s PowerSCADA Anywhere 1.0 (bundled with PowerSCADA Expert 8.1/8.2) and Citect Anywhere 1.0. The flaw enables multiple state-changing requests and requires some social engineering to lu...

CVE-2017-9963

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack require...

PT-2018-8543

Name of the Vulnerable Software and Affected Versions PowerSCADA Anywhere version 1.0 PowerSCADA Expert versions 8.1 through 8.2 Citect Anywhere version 1.0 Description A cross-site request forgery issue exists in the Secure Gateway component, allowing for multiple state-changing requests. This...

CVE-2017-9963: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack require...

CVE-2017-7970

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to specify Arbitrary Server Target Nodes in connection requests to the Secure Gateway and Server...

CVE-2017-7972

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes...