VDB

CVE-2022-24321

CVE-2022-24321 PUBLISHED CVSS 7.5 HIGH

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)

EPSS 0.46% · 64.3th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.46%
64.3th percentile

Affected Products

VendorProductVersions
schneider-electricecostruxure_geo_scada_expert_2020
schneider-electricecostruxure_geo_scada_expert_2019
n/aClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
schneider-electricclearscada

Exploit Intelligence

Timeline

  • Feb 9, 2022 CVE Published
  • Feb 10, 2022 EPSS Score
  • Apr 3, 2022 EPSS Score
  • May 26, 2022 EPSS Score
  • Jul 18, 2022 EPSS Score
  • Sep 9, 2022 EPSS Score
  • Oct 31, 2022 EPSS Score
  • Dec 22, 2022 EPSS Score
  • Feb 13, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 6, 2023 EPSS Score
  • May 28, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›