CVE-2017-7970

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to specify Arbitrary Server Target Nodes in connection requests to the Secure Gateway and Server...

CVE-2017-7972

CVE-2017-7972 affects Schneider Electric PowerSCADA Anywhere 1.0 (redistributed with PowerSCADA Expert v8.1/v8.2) and Citect Anywhere 1.0. The root cause is improper neutralization of expression/command delimiters, enabling an attacker to escape a remote PowerSCADA Anywhere application and launch...

PT-2017-18036

Name of the Vulnerable Software and Affected Versions Schneider Electric PowerSCADA Anywhere version 1.0 Schneider Electric PowerSCADA Expert versions 8.1 through 8.2 Citect Anywhere version 1.0 Description A vulnerability exists that allows the ability to specify arbitrary server target nodes in...

PT-2017-18037

Name of the Vulnerable Software and Affected Versions Schneider Electric PowerSCADA Anywhere version 1.0 Schneider Electric PowerSCADA Expert versions 8.1 through 8.2 Citect Anywhere version 1.0 Description A security issue exists that allows the use of outdated cipher suites and improper...

PT-2017-18035

Name of the Vulnerable Software and Affected Versions PowerSCADA Anywhere version 1.0 PowerSCADA Expert versions 8.1 through 8.2 Citect Anywhere version 1.0 Description A cross-site request forgery issue exists in the Secure Gateway component, allowing for multiple state-changing requests. This...

PT-2017-18038

Name of the Vulnerable Software and Affected Versions Schneider Electric's PowerSCADA Anywhere version 1.0 PowerSCADA Expert versions 8.1 through 8.2 Citect Anywhere version 1.0 Description A vulnerability exists that allows the ability to escape out of remote PowerSCADA Anywhere applications and...

Schneider Electric PowerSCADA Anywhere/Citect Anywhere Command Separator Improperity Vulnerability

PowerSCADA Anywhere is SCADA and power monitoring software.Citect is industrial automation operation and monitoring software. An improper command separator vulnerability exists in the implementation of PowerSCADA Anywhere 1.0 and Citect Anywhere version 1.0. An attacker in close network proximity...

Schneider Electric PowerSCADA Anywhere/Citect Anywhere Information Disclosure Vulnerability

PowerSCADA Anywhere is SCADA and power monitoring software.Citect is industrial automation operation and monitoring software. An information disclosure vulnerability exists in the implementation of PowerSCADA Anywhere version 1.0 and Citect Anywhere version 1.0, which allows an attacker with a...

Schneider Electric PowerSCADA Anywhere/Citect Anywhere Cross-Site Request Forgery Vulnerability

PowerSCADA Anywhere is SCADA and power monitoring software.Citect is industrial automation operation and monitoring software. A cross-site request forgery vulnerability exists in the gateway component of Schneider Electric PowerSCADA Anywhere version 1.0 and Citect Anywhere version 1.0, which can...

Schneider Electric PowerSCADA Anywhere/Citect Anywhere Certificate Validation Vulnerability

PowerSCADA Anywhere is SCADA and power monitoring software.Citect is industrial automation operation and monitoring software. A certificate validation vulnerability exists in PowerSCADA Anywhere version 1.0 and Citect Anywhere version 1.0. The vulnerability exists because the program uses expired...

Schneider Electric PowerSCADA Anywhere and Citect Anywhere

CVSS v3 8.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: PowerSCADA Anywhere and Citect Anywhere Vulnerabilities: Information Exposure, Cross-Site Request Forgery, Improper Neutralization of Expression, Improper Validation of Certificate...

PowerSCADA Photovoltaic Power Generation Automation Monitoring System APP suffers from SQL Injection Vulnerability

PowerSCADA PV power generation automation monitoring system APP is a power monitoring system that realizes real-time monitoring of all aspects of power, viewing of historical data, and real-time response to alarm messages in mobile terminals. PowerSCADA PV automation monitoring system APP has SQL...

CVE-2013-2824

CVE-2013-2824 affects Schneider Electric StruxureWare SCADA Expert Vijeo Citect (v7.40), Vijeo Citect (v7.20–7.30SP1), CitectSCADA (v7.20–7.30SP1), StruxureWare PowerSCADA Expert (v7.30–7.30SR1), and PowerLogic SCADA (v7.20–7.20SR1). The issue is an exception-handling flaw that allows remote atta...

CVE-2013-2824

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...

CVE-2013-2824: Undefined Security Weakness

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...