CVE-2019-6854

State: Published
Severity: Not scored
Published: Jan 6, 2020
Updated: Aug 4, 2024
Reserved: Jan 25, 2019

Description

A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -with initial releases before 1 January 2019- which could cause a low privilege user to delete or modify database, setting or certificate files. Those users must have access to the file system of that operating system to exploit this vulnerability. Affected versions in current support includes ClearSCADA 2017 R3, ClearSCADA 2017 R2, and ClearSCADA 2017.

Scores

The record has no CVSS score.

Weaknesses

CWE-287 Improper Authentication

Affected Products

Product	Versions
EcoStruxure Geo SCADA Expert (ClearSCADA) with initial releases before 1 January 2019 (see notification for more details)n/a	EcoStruxure Geo SCADA Expert (ClearSCADA) with initial releases before 1 January 2019 (see notification for more details)Affected

References

https://www.se.com/ww/en/download/document/SEVD-2019-344-05/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.