Known vulnerabilities in Schneider Electric ClearSCADA
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-0595 | A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log… | 5.3 Medium | Feb 24, 2023 |
| CVE-2014-5413 | Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509… | 6.4 Not rated | Sep 18, 2014 |
| CVE-2014-5412 | Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database… | 6.4 Not rated | Sep 18, 2014 |
| CVE-2014-5411 | Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3… | 4.9 Not rated | Sep 18, 2014 |
| CVE-2014-0779 | The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA… | 6.8 Not rated | Mar 14, 2014 |
Other Schneider Electric products
StruxureWare Data Center Expert 15
Modicon M340 CPU (part numbers BMXP34*) 12
EcoStruxure Control Expert 12
PowerChute™ Serial Shutdown 11
IGSS Data Server (IGSSdataServer.exe) 10
IGSS Dashboard (DashBoard.exe) 9
EcoStruxure Process Expert 9
Custom Reports (RMS16.dll) 8
IGSS Data Server(IGSSdataServer.exe) 8
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) 7
Modicon Controllers M241/M251 7
Modicon Momentum Unity M1E Processor (171CBU*) 7