Incorrect Authorization Vulnerability in Geo SCADA Server by Schneider Electric
CVE-2023-22610

9.1CRITICAL

Key Information:

Vendor: Schneider Electric
Status: Ecostruxure Geo Scada Expert 2019 - 2021 (formerly Known As Clearscada)
Vendor: CVE Published:; 31 January 2023

🔔 Create Schneider Electric Vulnerability Alert

What is CVE-2023-22610?

An Incorrect Authorization vulnerability exists within the Geo SCADA server, potentially leading to a Denial of Service condition. When specific malicious messages are directed at the server's database server TCP port, it can trigger disruptions, impacting the availability and reliability of the Geo SCADA services. Organizations using the affected versions are advised to apply the necessary patches to safeguard against potential exploitation.

Affected Version(s)

EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) All

References

https://download.schneider-electric.com/files?p_Doc_Ref=S...

CVSS V3.1

Score:

9.1

Severity:

CRITICAL

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 31, 2023
Vulnerability Reserved
Jan 4, 2023