Vulnetix
Try Vulnetix Request Demo
CVE-2022-24318 PUBLISHED CVSS 7.5 HIGH

A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)

EPSS 0.08% · 23.8th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.08%
23.8th percentile

Affected Products

VendorProductVersions
schneider-electricecostruxure_geo_scada_expert_2019
schneider-electricecostruxure_geo_scada_expert_2020
n/aClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
schneider-electricclearscada

Timeline

References

Open in Interactive Console →