Summary
Schneider Electric is aware of a vulnerability in its EcoStruxure Geo SCADA Expert products
(formerly known as ClearSCADA).
The EcoStruxure Geo SCADA Expert product is an open, flexible and scalable software system
for telemetry and remote SCADA solutions.
Failure to apply the remediations provided below may risk the revealing of account credentials,
which could result in unauthorized system access.
Vulnerabilities 1
-
Unscored —
Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStrux…
Revision history
-
#1.0.0
Original Release
References
-
EcoStruxure Geo SCADA Expert - SEVD-2021-130-07 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-07&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-130-07_GeoSCADA_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/