Description (CNA)
Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schneider Electric / ClearSCADA | affected 2010 R3 (build 72.4560); affected 2010 R3.1 (build 72.4644); unaffected 2010 R3.2 |
| Schneider Electric / SCADA Expert ClearSCADA | affected 2013 R1 (build 73.4729); affected 2013 R1.1 (build 73.4832); affected 2013 R1.1a (build 73.4903); affected 2013 R1.2 (build 73.4955); affected 2013 R2 (build 74.5094); affected 2013 R2.1 (build 74.5192); affected 2014 R1 (build 75.5210); unaffected 2014 R1.1 |
CWE
CWE-287
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json
ADP enrichment
No English description supplied.