A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to specify Arbitrary Server Target Nodes in connection requests to the Secure Gateway and Server components.
Existe una vulnerabilidad en la versión 1.0 de PowerSCADA Anywhere de Schneider Electric redistribuida con PowerSCADA Expert 8.1, PowerSCADA Expert 8.2 y Citect Anywhere 1.0 que permite que se especifiquen nodos de destino del servidor arbitrarios en peticiones de conexión a los componentes de Secure Gateway y Server.
AV:A/AC:L/Au:N/C:P/I:N/A:N
| Access Vector | ADJACENT_NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | powerscada_anywhere | 1.0 | <built-in method update of dict object at 0x7e60eb2aca40> | Application |
| schneider-electric | citect_anywhere | 1.0 | <built-in method update of dict object at 0x7e610742cf40> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:powerscada_anywhere:1.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:a:schneider-electric:powerscada_expert:8.1:*:*:*:*:*:*:* |
| No | cpe:2.3:a:schneider-electric:powerscada_expert:8.2:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:citect_anywhere:1.0:*:*:*:*:*:*:* |