EcoStruxure Geo SCADA Expert and ClearSCADA Log Injection Vulnerability Notification
This document details a medium-severity vulnerability (CVE-2023-0595) in Schneider Electric's EcoStruxure Geo SCADA Expert and ClearSCADA products, where improper output neutralization for logs (CWE-117) allows attackers to inject arbitrary text entries into log files via the database web port. The notification provides remediation through October 2022 updates and recommends mitigations such as restricting network access to the affected port.
Failed to load PDF
Download insteadYou might also like
Modicon M241 Logic Controller 24 I/O Relay
13 pages
666TML24 Red LED Indicator Module Data Sheet
1 pages
MV/LV Transformer Protection for Data Centers Application Note
48 pages
TAC Vista Building Management System Application Guide
1 pages
Hospital Maternity Department Renovation: Active Safety System Case Study
2 pages
Modicon TM3 16-Output Transistor PNP Discrete Output Module
9 pages
EPDU2163B Easy PDU Basic Rack Power Distribution Unit Specifications
2 pages
AP8958EU3 Switched Rack PDU Specifications
18 pages
RM6 Pressure Switch Retrofit Installation Guide
24 pages
Symmetra MW Modular UPS Application Note
6 pages