Schneider-electric Ecostruxure Geo Scada Expert 2020 — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Ecostruxure Geo Scada Expert 2020, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2023-22610 — CVSS 9.1 (critical): A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific…
• CVE-2020-28219 — CVSS 7.8 (high): A CWE-522: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Geo SCADA Expert 2019 (Original release and Monthly…
• CVE-2023-22611 — CVSS 7.5 (high): A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when…
• CVE-2022-24318 — CVSS 7.5 (high): A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated…
• CVE-2022-24321 — CVSS 7.5 (high): A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo…
• CVE-2021-22741 — CVSS 6.7 (medium): Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert…
• CVE-2022-24319 — CVSS 5.9 (medium): A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the…
• CVE-2022-24320 — CVSS 5.9 (medium): A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the…
• CVE-2023-0595 — CVSS 5.3 (medium): A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious…