CVE-2023-0595 — Schneider Electric / EcoStruxure Geo SCADA Expert 2019

Description (CNA)

A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure Geo SCADA Expert 2019	affected All through October 2022
Schneider Electric / EcoStruxure Geo SCADA Expert 2020	affected All through October 2022
Schneider Electric / EcoStruxure Geo SCADA Expert 2021	affected All through October 2022
Schneider Electric / ClearSCADA	affected All Versions

CWE

CWE-117

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-01.pdf

ADP enrichment

CVE

No English description supplied.

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-01.pdf

CISA-ADP

No English description supplied.

No references supplied.