Improper output encoding in Schneider Electric EcoStruxure Geo SCADA Expert 2019
Priority LOW 30CWE-117Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00417 36th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Schneider Electric | EcoStruxure Geo SCADA Expert 2019 | All – October 2022 | — | No fix listed | CNA |
| Schneider Electric | EcoStruxure Geo SCADA Expert 2020 | All – October 2022 | — | No fix listed | CNA |
| Schneider Electric | EcoStruxure Geo SCADA Expert 2021 | All – October 2022 | — | No fix listed | CNA |
| Schneider Electric | ClearSCADA | All Versions | — | No fix listed | CNA |
- EcoStruxure Geo SCADA Expert 2019 VendorSchneider Electric Affected All – October 2022 Fixed in — No fix listed CNA
- EcoStruxure Geo SCADA Expert 2020 VendorSchneider Electric Affected All – October 2022 Fixed in — No fix listed CNA
- EcoStruxure Geo SCADA Expert 2021 VendorSchneider Electric Affected All – October 2022 Fixed in — No fix listed CNA
- ClearSCADA VendorSchneider Electric Affected All Versions Fixed in — No fix listed CNA
CPE configurations NVD · 62
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:schneider-electric:clearscada:*:*:*:*:*:*:*:* | all versions | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:* | 81.7268.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:* | 81.7322.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:* | 81.7429.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:* | 81.7457.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:* | 81.7488.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:* | 81.7522.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:* | 81.7545.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:* | 81.7578.1 | Vulnerable | Schneider Electric |
- cpe:2.3:a:schneider-electric:clearscada:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:* Versions 81.7268.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:* Versions 81.7322.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:* Versions 81.7429.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:* Versions 81.7457.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:* Versions 81.7488.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:* Versions 81.7522.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:* Versions 81.7545.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:* Versions 81.7578.1 Vulnerable ·Schneider Electric
Show 52 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:* | 81.7613.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:* | 81.7641.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:* | 81.7690.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:* | 81.7714.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:* | 81.7742.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:* | 81.7777.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:* | 81.7808.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:* | 81.7840.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:* | 81.7875.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:* | 81.7896.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:* | 81.7936.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:* | 81.7980.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:* | 81.8015.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:* | 81.8108.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:* | 81.8122.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:* | 81.8155.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:* | 81.8172.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:* | 81.8197.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:* | 81.8220.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:* | 81.8267.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:* | 83.7551.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:* | 83.7578.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:* | 83.7613.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:* | 83.7641.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:* | 83.7692.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:* | 83.7717.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:* | 83.7742.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:* | 83.7787.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:* | 83.7809.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:* | 83.7840.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:* | 83.7875.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:* | 83.7913.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:* | 83.7936.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:* | 83.7980.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:* | 83.8017.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:* | 83.8108.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:* | 83.8122.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:* | 83.8155.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:* | 83.8181.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:* | 83.8197.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:* | 83.8221.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:* | 83.8267.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:* | 84.8027.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:* | 84.8108.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:* | 84.8120.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:* | 84.8158.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:* | 84.8182.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:* | 84.8197.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:* | 84.8218.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:* | 84.8269.1 | Vulnerable | Schneider Electric |
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:* Versions 81.7613.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:* Versions 81.7641.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:* Versions 81.7690.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:* Versions 81.7714.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:* Versions 81.7742.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:* Versions 81.7777.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:* Versions 81.7808.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:* Versions 81.7840.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:* Versions 81.7875.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:* Versions 81.7896.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:* Versions 81.7936.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:* Versions 81.7980.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:* Versions 81.8015.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:* Versions 81.8108.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:* Versions 81.8122.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:* Versions 81.8155.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:* Versions 81.8172.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:* Versions 81.8197.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:* Versions 81.8220.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:* Versions 81.8267.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:* Versions 83.7551.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:* Versions 83.7578.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:* Versions 83.7613.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:* Versions 83.7641.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:* Versions 83.7692.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:* Versions 83.7717.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:* Versions 83.7742.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:* Versions 83.7787.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:* Versions 83.7809.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:* Versions 83.7840.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:* Versions 83.7875.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:* Versions 83.7913.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:* Versions 83.7936.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:* Versions 83.7980.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:* Versions 83.8017.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:* Versions 83.8108.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:* Versions 83.8122.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:* Versions 83.8155.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:* Versions 83.8181.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:* Versions 83.8197.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:* Versions 83.8221.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:* Versions 83.8267.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:* Versions 84.8027.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:* Versions 84.8108.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:* Versions 84.8120.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:* Versions 84.8158.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:* Versions 84.8182.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:* Versions 84.8197.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:* Versions 84.8218.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:* Versions 84.8269.1 Vulnerable ·Schneider Electric
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-0595
- 2026-10-03 Alias added: GHSA-27q3-84pw-qmf2
References
More Schneider Electric Clearscada vulnerabilities
- TI-2017-03931 Improper input validation in Schneider Electric ClearSCADA CVSS 3.0HIGH 7.5
- TI-2022-08201 Improper check for unusual conditions in ClearSCADA , EcoStruxure Geo SCADA Expert 2019… CVSS 3.1HIGH 7.5
- TI-2022-08198 A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause… CVSS 3.1HIGH 7.5
- TI-2019-04887 Improper authentication in EcoStruxure Geo SCADA Expert with initial releases before 1… CVSS 3.1HIGH 7.8
- TI-2021-05622 Use of Password Hash with Insufficient Computational Effort vulnerability exists in… CVSS 3.1MEDIUM 6.7
- TI-2022-08200 Improper certificate validation in ClearSCADA , EcoStruxure Geo SCADA Expert 2019… CVSS 3.1MEDIUM 5.9
Sources
- CVE-2023-0595 · CVE Program
- CVE-2023-0595 · NVD
- FIRST EPSS
- GHSA-27q3-84pw-qmf2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences