Riskcovery

CVE-2017-7969

State
Published
Severity
Not scored
Published
Sep 25, 2017
Updated
Sep 17, 2024
Reserved
Apr 19, 2017

Read the record on cve.org

Description

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
PowerSCADA AnywhereSchneider Electric SE
  • Version 1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2Affected
Citect AnywhereSchneider Electric SE
  • version 1.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.