critical9.1
CVE-2023-22610
A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the …
Impact
A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Ecostruxure Geo Scada Expert 2019 | All versions Versions 81.7268.1, 81.7322.1, 81.7429.2, 81.7457.1, 81.7488.1 |
| Schneider-Electric | Ecostruxure Geo Scada Expert 2020 | All versions Versions 83.7551.1, 83.7578.1, 83.7613.1, 83.7641.1, 83.7692.1 |
| Schneider-Electric | Ecostruxure Geo Scada Expert 2021 | All versions Versions 84.8027.1, 84.8108.1, 84.8120.1, 84.8158.1, 84.8182.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf