Summary
Schneider Electric is aware of a vulnerability in its EcoStruxureTM Geo SCADA Expert software product, formerly known as ClearSCADA.
The EcoStruxureTM Geo SCADA Expert product is an open, flexible and scalable software for telemetry and remote SCADA solutions.
If successfully exploited, bad actors could arbitrarily inject text entries into product log files, including falsified entries, or filling the log files with bad data.
Failure to apply the remediation provided below may risk the compromise of product log files.
Vulnerabilities 1
-
Medium 5.3
A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log f…
Revision history
-
#1
Original Release
References
-
EcoStruxureTM Geo SCADA Expert - SEVD-2023-045-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/