High ICSA-17-201-01 4 CVEs

Schneider Electric PowerSCADA Anywhere and Citect Anywhere

Published Jul 20, 2017 · Updated Jul 20, 2017

Vendor: Schneider Electric Product: Citect Anywhere Product: PowerSCADA Anywhere redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 4

Unscored —

CVE-2017-7969

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA An…

Schneider Electric PowerSCADA Anywhere Citect Anywhere ICS / OT

Sep 25, 2017
Unscored —

CVE-2017-7970

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and P…

Schneider Electric PowerSCADA Anywhere Citect Anywhere ICS / OT

Sep 25, 2017
Unscored —

CVE-2017-7971

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and P…

Schneider Electric Citect Anywhere PowerSCADA Anywhere ICS / OT

Sep 25, 2017
Unscored —

CVE-2017-7972

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and P…

Schneider Electric Citect Anywhere PowerSCADA Anywhere ICS / OT

Sep 25, 2017

Revision history

2017-07-20 #1
Publication Date

References

ICS Advisory ICSA-17-201-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-201-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-201-01