ClearSCADA Web Request Server Crash Vulnerability Disclosure

This document discloses a vulnerability in Schneider Electric's SCADA Expert ClearSCADA software (versions 2013 R1, R1.1, and R1.1a) where improper handling of web requests causes the server to crash, though redundant systems can take over. It provides mitigation steps, including upgrading to ClearSCADA 2013 R1.2, limiting network access, and references a CVSS base score of 9.4.