← Back

CVE-2023-22611

nvd nist
Published: Jan 31, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Versions prior to October 2022)

Affected (61)

Ecostruxure Geo Scada Expert 2019
Ecostruxure Geo Scada Expert 2020
Ecostruxure Geo Scada Expert 2021
Configuration A
61 vulnerable
Vulnerable SoftwareAffected Versions
Schneider Electric
All versions
Version 81.7268.1
Version 81.7322.1
Version 81.7429.2
Version 81.7457.1
Version 81.7488.1
Version 81.7522.1
Version 81.7545.1
Version 81.7578.1
Version 81.7613.1
Version 81.7641.1
Version 81.7690.1
Version 81.7714.1
Version 81.7742.1
Version 81.7777.1
Version 81.7808.2
Version 81.7840.1
Version 81.7875.1
Version 81.7896.1
Version 81.7936.1
Version 81.7980.1
Version 81.8015.1
Version 81.8108.2
Version 81.8122.1
Version 81.8155.1
Version 81.8172.1
Version 81.8197.1
Version 81.8220.1
Version 81.8267.1
Schneider Electric
All versions
Version 83.7551.1
Version 83.7578.1
Version 83.7613.1
Version 83.7641.1
Version 83.7692.1
Version 83.7717.1
Version 83.7742.1
Version 83.7787.1
Version 83.7809.1
Version 83.7840.1
Version 83.7875.1
Version 83.7913.1
Version 83.7936.2
Version 83.7980.2
Version 83.8017.1
Version 83.8108.1
Version 83.8122.2
Version 83.8155.1
Version 83.8181.1
Version 83.8197.1
Version 83.8221.1
Version 83.8267.1
All versions
Version 84.8027.1
Version 84.8108.1
Version 84.8120.1
Version 84.8158.1
Version 84.8182.1
Version 84.8197.1
Version 84.8218.1
Version 84.8269.1

Timeline

No history available yet.