← Back

CVE-2023-22610

nvd nist
Published: Jan 31, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.

Affected (61)

Schneider Electric
3 products
Ecostruxure Geo Scada Expert 2019
Ecostruxure Geo Scada Expert 2020
Ecostruxure Geo Scada Expert 2021
Configuration A
61 vulnerable
Vulnerable SoftwareAffected Versions
Schneider Electric
Ecostruxure Geo Scada Expert 2019
All versions
Ecostruxure Geo Scada Expert 2019
Version 81.7268.1
Ecostruxure Geo Scada Expert 2019
Version 81.7322.1
Ecostruxure Geo Scada Expert 2019
Version 81.7429.2
Ecostruxure Geo Scada Expert 2019
Version 81.7457.1
Ecostruxure Geo Scada Expert 2019
Version 81.7488.1
Ecostruxure Geo Scada Expert 2019
Version 81.7522.1
Ecostruxure Geo Scada Expert 2019
Version 81.7545.1
Ecostruxure Geo Scada Expert 2019
Version 81.7578.1
Ecostruxure Geo Scada Expert 2019
Version 81.7613.1
Ecostruxure Geo Scada Expert 2019
Version 81.7641.1
Ecostruxure Geo Scada Expert 2019
Version 81.7690.1
Ecostruxure Geo Scada Expert 2019
Version 81.7714.1
Ecostruxure Geo Scada Expert 2019
Version 81.7742.1
Ecostruxure Geo Scada Expert 2019
Version 81.7777.1
Ecostruxure Geo Scada Expert 2019
Version 81.7808.2
Ecostruxure Geo Scada Expert 2019
Version 81.7840.1
Ecostruxure Geo Scada Expert 2019
Version 81.7875.1
Ecostruxure Geo Scada Expert 2019
Version 81.7896.1
Ecostruxure Geo Scada Expert 2019
Version 81.7936.1
Ecostruxure Geo Scada Expert 2019
Version 81.7980.1
Ecostruxure Geo Scada Expert 2019
Version 81.8015.1
Ecostruxure Geo Scada Expert 2019
Version 81.8108.2
Ecostruxure Geo Scada Expert 2019
Version 81.8122.1
Ecostruxure Geo Scada Expert 2019
Version 81.8155.1
Ecostruxure Geo Scada Expert 2019
Version 81.8172.1
Ecostruxure Geo Scada Expert 2019
Version 81.8197.1
Ecostruxure Geo Scada Expert 2019
Version 81.8220.1
Ecostruxure Geo Scada Expert 2019
Version 81.8267.1
Schneider Electric
Ecostruxure Geo Scada Expert 2020
All versions
Ecostruxure Geo Scada Expert 2020
Version 83.7551.1
Ecostruxure Geo Scada Expert 2020
Version 83.7578.1
Ecostruxure Geo Scada Expert 2020
Version 83.7613.1
Ecostruxure Geo Scada Expert 2020
Version 83.7641.1
Ecostruxure Geo Scada Expert 2020
Version 83.7692.1
Ecostruxure Geo Scada Expert 2020
Version 83.7717.1
Ecostruxure Geo Scada Expert 2020
Version 83.7742.1
Ecostruxure Geo Scada Expert 2020
Version 83.7787.1
Ecostruxure Geo Scada Expert 2020
Version 83.7809.1
Ecostruxure Geo Scada Expert 2020
Version 83.7840.1
Ecostruxure Geo Scada Expert 2020
Version 83.7875.1
Ecostruxure Geo Scada Expert 2020
Version 83.7913.1
Ecostruxure Geo Scada Expert 2020
Version 83.7936.2
Ecostruxure Geo Scada Expert 2020
Version 83.7980.2
Ecostruxure Geo Scada Expert 2020
Version 83.8017.1
Ecostruxure Geo Scada Expert 2020
Version 83.8108.1
Ecostruxure Geo Scada Expert 2020
Version 83.8122.2
Ecostruxure Geo Scada Expert 2020
Version 83.8155.1
Ecostruxure Geo Scada Expert 2020
Version 83.8181.1
Ecostruxure Geo Scada Expert 2020
Version 83.8197.1
Ecostruxure Geo Scada Expert 2020
Version 83.8221.1
Ecostruxure Geo Scada Expert 2020
Version 83.8267.1
Ecostruxure Geo Scada Expert 2021
All versions
Ecostruxure Geo Scada Expert 2021
Version 84.8027.1
Ecostruxure Geo Scada Expert 2021
Version 84.8108.1
Ecostruxure Geo Scada Expert 2021
Version 84.8120.1
Ecostruxure Geo Scada Expert 2021
Version 84.8158.1
Ecostruxure Geo Scada Expert 2021
Version 84.8182.1
Ecostruxure Geo Scada Expert 2021
Version 84.8197.1
Ecostruxure Geo Scada Expert 2021
Version 84.8218.1
Ecostruxure Geo Scada Expert 2021
Version 84.8269.1

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

Source: cybersecurity@se.com
MitigationPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationPatchVendor Advisory

Timeline

No history available yet.