CVE-2022-24318

HIGH

ClearSCADA, EcoStruxure Geo SCADA Expert - Info Disclosure

Title source: llm

Description

A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)

References (1)

[Patch, Vendor Advisory] https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05

Scores

CVSS v3 7.5

EPSS 0.0008

EPSS Percentile 23.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-326

Status published

Products (3)

schneider-electric/clearscada

schneider-electric/ecostruxure_geo_scada_expert_2019

schneider-electric/ecostruxure_geo_scada_expert_2020

Published Feb 09, 2022

Tracked Since Feb 18, 2026