CVE-2014-5412
N/A
N/A
Summary
Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Schneider Electric | ClearSCADA | 2010 R3 (build 72.4560) | affected |
| Schneider Electric | ClearSCADA | 2010 R3.1 (build 72.4644) | affected |
| Schneider Electric | ClearSCADA | 2010 R3.2 | unaffected |
| Schneider Electric | SCADA Expert ClearSCADA | 2013 R1 (build 73.4729) | affected |
| Schneider Electric | SCADA Expert ClearSCADA | 2013 R1.1 (build 73.4832) | affected |
| Schneider Electric | SCADA Expert ClearSCADA | 2013 R1.1a (build 73.4903) | affected |
| Schneider Electric | SCADA Expert ClearSCADA | 2013 R1.2 (build 73.4955) | affected |
| Schneider Electric | SCADA Expert ClearSCADA | 2013 R2 (build 74.5094) | affected |
| Schneider Electric | SCADA Expert ClearSCADA | 2013 R2.1 (build 74.5192) | affected |
| Schneider Electric | SCADA Expert ClearSCADA | 2014 R1 (build 75.5210) | affected |
| Schneider Electric | SCADA Expert ClearSCADA | 2014 R1.1 | unaffected |
Weaknesses
- CWE-287: CWE-287
ADP Enrichment
CVE Program Container
Additional References
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.