Information disclosure in Schneider Electric EcoStruxure Geo SCADA Expert 2019 - 2021
Priority MEDIUM 40CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.
Summary
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Versions prior to October 2022)
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00569 47th percentileScored 2026-11-07
Fix Fixed EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Schneider Electric): October 2022
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Schneider Electric | EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) | All to before October 2022 | October 2022 | Patch available | CNA |
- EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) VendorSchneider Electric Affected All to before October 2022 Fixed in October 2022 Patch available CNA
CPE configurations NVD · 61
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:* | 81.7268.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:* | 81.7322.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:* | 81.7429.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:* | 81.7457.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:* | 81.7488.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:* | 81.7522.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:* | 81.7545.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:* | 81.7578.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:* | 81.7613.1 | Vulnerable | Schneider Electric |
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:* Versions 81.7268.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:* Versions 81.7322.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:* Versions 81.7429.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:* Versions 81.7457.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:* Versions 81.7488.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:* Versions 81.7522.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:* Versions 81.7545.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:* Versions 81.7578.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:* Versions 81.7613.1 Vulnerable ·Schneider Electric
Show 51 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:* | 81.7641.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:* | 81.7690.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:* | 81.7714.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:* | 81.7742.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:* | 81.7777.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:* | 81.7808.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:* | 81.7840.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:* | 81.7875.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:* | 81.7896.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:* | 81.7936.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:* | 81.7980.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:* | 81.8015.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:* | 81.8108.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:* | 81.8122.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:* | 81.8155.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:* | 81.8172.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:* | 81.8197.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:* | 81.8220.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:* | 81.8267.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:* | 83.7551.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:* | 83.7578.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:* | 83.7613.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:* | 83.7641.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:* | 83.7692.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:* | 83.7717.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:* | 83.7742.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:* | 83.7787.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:* | 83.7809.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:* | 83.7840.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:* | 83.7875.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:* | 83.7913.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:* | 83.7936.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:* | 83.7980.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:* | 83.8017.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:* | 83.8108.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:* | 83.8122.2 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:* | 83.8155.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:* | 83.8181.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:* | 83.8197.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:* | 83.8221.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:* | 83.8267.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:* | 84.8027.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:* | 84.8108.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:* | 84.8120.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:* | 84.8158.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:* | 84.8182.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:* | 84.8197.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:* | 84.8218.1 | Vulnerable | Schneider Electric |
| cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:* | 84.8269.1 | Vulnerable | Schneider Electric |
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:* Versions 81.7641.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:* Versions 81.7690.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:* Versions 81.7714.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:* Versions 81.7742.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:* Versions 81.7777.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:* Versions 81.7808.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:* Versions 81.7840.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:* Versions 81.7875.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:* Versions 81.7896.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:* Versions 81.7936.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:* Versions 81.7980.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:* Versions 81.8015.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:* Versions 81.8108.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:* Versions 81.8122.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:* Versions 81.8155.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:* Versions 81.8172.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:* Versions 81.8197.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:* Versions 81.8220.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:* Versions 81.8267.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:* Versions 83.7551.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:* Versions 83.7578.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:* Versions 83.7613.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:* Versions 83.7641.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:* Versions 83.7692.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:* Versions 83.7717.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:* Versions 83.7742.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:* Versions 83.7787.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:* Versions 83.7809.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:* Versions 83.7840.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:* Versions 83.7875.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:* Versions 83.7913.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:* Versions 83.7936.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:* Versions 83.7980.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:* Versions 83.8017.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:* Versions 83.8108.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:* Versions 83.8122.2 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:* Versions 83.8155.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:* Versions 83.8181.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:* Versions 83.8197.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:* Versions 83.8221.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:* Versions 83.8267.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:* Versions 84.8027.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:* Versions 84.8108.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:* Versions 84.8120.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:* Versions 84.8158.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:* Versions 84.8182.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:* Versions 84.8197.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:* Versions 84.8218.1 Vulnerable ·Schneider Electric
- cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:* Versions 84.8269.1 Vulnerable ·Schneider Electric
Remediation
- Fix · CNA EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Schneider Electric) Fixed in October 2022
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Schneider Electric EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) October 2022
2 records Highest priority Priority MEDIUM 2 MEDIUM
Other records, highest priority first
- TI-2023-08793 Incorrect authorization in Schneider Electric EcoStruxure Geo SCADA Expert 2019 - 2021Priority MEDIUM 46
Timeline
- 2026-10-02 Threatist record created from CVE-2023-22611
- 2026-10-03 Alias added: GHSA-fp8q-744c-xpg4
More Schneider Electric Ecostruxure Geo Scada Expert 2019 vulnerabilities
- TI-2023-08793 Incorrect authorization in Schneider Electric EcoStruxure Geo SCADA Expert 2019 - 2021 CVSS 3.1CRITICAL 9.1
- TI-2022-08201 Improper check for unusual conditions in ClearSCADA , EcoStruxure Geo SCADA Expert 2019… CVSS 3.1HIGH 7.5
- TI-2020-17149 Insufficiently protected credentials in EcoStruxure Geo SCADA Expert 2019 and EcoStruxure… CVSS 3.1HIGH 7.8
- TI-2022-08198 A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause… CVSS 3.1HIGH 7.5
- TI-2023-00564 Improper output encoding in Schneider Electric EcoStruxure Geo SCADA Expert 2019 CVSS 3.1MEDIUM 5.3
- TI-2021-05622 Use of Password Hash with Insufficient Computational Effort vulnerability exists in… CVSS 3.1MEDIUM 6.7
Sources
- CVE-2023-22611 · CVE Program
- CVE-2023-22611 · NVD
- FIRST EPSS
- GHSA-fp8q-744c-xpg4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences