CVE-2023-22610

State: Published
Severity: 9.1 Critical
Published: Jan 31, 2023
Updated: Feb 5, 2025
Reserved: Jan 4, 2023

Description

A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H	schneider

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA)Schneider Electric	All to before October 2022Affected

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.