CVE-2023-0595

State: Published
Severity: 5.3 Medium
Published: Feb 24, 2023
Updated: Feb 5, 2025
Reserved: Jan 31, 2023

Description

A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	schneider

Weaknesses

CWE-117 Improper Output Neutralization for Logs

Affected Products

Product	Versions
EcoStruxure Geo SCADA Expert 2019Schneider Electric	All through October 2022Affected
EcoStruxure Geo SCADA Expert 2020Schneider Electric	All through October 2022Affected
EcoStruxure Geo SCADA Expert 2021Schneider Electric	All through October 2022Affected
ClearSCADASchneider Electric	All VersionsAffected

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-01.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.