PT-2014-6459
CVE-2014-5412
·
Published
2014-09-18
·
Updated
2025-11-04
Description by
CVSS 2.0
6.4
MediumMetricsAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Schneider Electric StruxureWare SCADA Expert ClearSCADA versions 2010 R3 through 2014 R1
Description
The issue allows remote attackers to read database records by leveraging access to the guest account.
Recommendations
For versions 2010 R3 through 2014 R1, consider restricting access to the guest account to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾