CVE-2023-22611

State: Published
Severity: 7.5 High
Published: Jan 31, 2023
Updated: Feb 5, 2025
Reserved: Jan 4, 2023

Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Versions prior to October 2022)

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	schneider

Weaknesses

CWE-200 Information Exposure

Affected Products

Product	Versions
EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA)Schneider Electric	All to before October 2022Affected

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.