GHSA-hv4q-f4h2-qj89

GHSA-hv4q-f4h2-qj89 PUBLISHED

Record from GitHub Advisory Database · Published February 11, 2022

A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)

Timeline

Feb 11, 2022 CVE Published
Apr 9, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-hv4q-f4h2-qj89
vulnetix vdb fixes GHSA-hv4q-f4h2-qj89

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-hv4q-f4h2-qj89/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2022-24318 advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05 url

Look up in the Resolve Platform →