Cryptographic Vulnerability in Schneider Electric SCADA System
CVE-2014-5413
Currently unrated
What is CVE-2014-5413?
Schneider Electric StruxureWare SCADA Expert ClearSCADA from versions 2010 R3 through 2014 R1 employs the MD5 hashing algorithm for X.509 certificates. This reliance on the MD5 algorithm introduces significant security risks, enabling remote attackers to exploit vulnerabilities in the cryptographic implementation and potentially spoof server identities. Such spoofing can lead to unauthorized access and manipulation of critical SCADA system functions.
Affected Version(s)
ClearSCADA 2010 R3 (build 72.4560)
ClearSCADA 2010 R3.1 (build 72.4644)
SCADA Expert ClearSCADA 2013 R1 (build 73.4729)