VDB

CVE-2022-24318

CVE-2022-24318 PUBLISHED CVSS 7.5 HIGH

A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)

EPSS 0.08% · 23.9th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.08%
23.9th percentile

Affected Products

VendorProductVersions
schneider-electricecostruxure_geo_scada_expert_2019
schneider-electricecostruxure_geo_scada_expert_2020
n/aClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
schneider-electricclearscada

Exploit Intelligence

Timeline

  • Feb 9, 2022 CVE Published
  • Feb 10, 2022 EPSS Score
  • Apr 3, 2022 EPSS Score
  • May 26, 2022 EPSS Score
  • Jul 18, 2022 EPSS Score
  • Sep 9, 2022 EPSS Score
  • Oct 31, 2022 EPSS Score
  • Dec 22, 2022 EPSS Score
  • Feb 13, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 6, 2023 EPSS Score
  • May 28, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›