8% (76) • 1.2k views • 4 pages

EcoStruxure Geo SCADA Expert and ClearSCADA Log Injection Vulnerability Notification

AI-enhanced description

This document details a medium-severity vulnerability (CVE-2023-0595) in Schneider Electric's EcoStruxure Geo SCADA Expert and ClearSCADA products, where improper output neutralization for logs (CWE-117) allows attackers to inject arbitrary text entries into log files via the database web port. The notification provides remediation through October 2022 updates and recommends mitigations such as restricting network access to the affected port.

Uploaded by LUKA.MILAN
Download
/ 4
Loading document…

You might also like

A702-A704 Temperature Sensors for DC1100 Controllers Data Sheet
PDF
64% (91)

A702-A704 Temperature Sensors for DC1100 Controllers Data Sheet

2 pages
AVUE, AVUX, AVUM Compact Linear Actuators Selection Guide
PDF
98% (26)

AVUE, AVUX, AVUM Compact Linear Actuators Selection Guide

8 pages
SpaceLogic AS-P and AS-B Automation Servers Security Notification
PDF
27% (79)

SpaceLogic AS-P and AS-B Automation Servers Security Notification

4 pages
SpaceLogic C-Bus DALI-2 Gateway Manual
PDF
2% (36)

SpaceLogic C-Bus DALI-2 Gateway Manual

4 pages
Revox Audio Integration with spaceLYnk, Wiser for KNX, and fellerLYnk Application Note
PDF
56% (67)

Revox Audio Integration with spaceLYnk, Wiser for KNX, and fellerLYnk Application Note

14 pages
RCA iC60 Remote Control for Tunnel Surveillance Camera Power Supply
PDF
54% (11)

RCA iC60 Remote Control for Tunnel Surveillance Camera Power Supply

2 pages
Galaxy VM Battery Cabinet Runtime Tables
PDF
99% (100)

Galaxy VM Battery Cabinet Runtime Tables

5 pages
Proactive Parts Replacement Service Statement of Work
PDF
95% (56)

Proactive Parts Replacement Service Statement of Work

12 pages
Satchwell MZ/MZF Three-Port Seat Valves Data Sheet
PDF
35% (3)

Satchwell MZ/MZF Three-Port Seat Valves Data Sheet

4 pages
TAC Vista Workstation Overview
PDF
46% (92)

TAC Vista Workstation Overview

4 pages