EcoStruxure Geo SCADA Expert (ClearSCADA) Security Advisory

This document is a security advisory from Schneider Electric detailing a high-severity improper authentication vulnerability (CVE-2019-6854) in EcoStruxure Geo SCADA Expert (ClearSCADA) versions before 2019. It outlines affected products, remediation steps (upgrading to version 2019), and workarounds involving correcting file permissions on the ProgramData folder to prevent low-privilege users from deleting or modifying database, setting, or certificate files.