PT-2023-1019 · Schneider Electric · Ecostruxure Geo Scada Expert+1

CVE-2023-22610

·

Publicado

2023-01-10

·

Atualizado

2023-06-14

CVSS v2.0

9.4

Crítica

VetorAV:N/AC:L/Au:N/C:N/I:C/A:C
Name of the Vulnerable Software and Affected Versions EcoStruxure Geo SCADA Expert versions 2019 through 2021 prior to October 2022 ClearSCADA versions prior to the fixed version
Description A vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port. This issue is related to incorrect authorization.
Recommendations For EcoStruxure Geo SCADA Expert versions 2019 through 2021 prior to October 2022, update to a version released after October 2022 to resolve the issue. For ClearSCADA, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Incorrect Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-00072
CVE-2023-22610

Produtos afetados

Clearscada
Ecostruxure Geo Scada Expert