A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | LOW |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-117
|
| [email protected] | Secondary |
en
CWE-116
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | clearscada | * | <built-in method update of dict object at 0x7e60eb227d00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | - | <built-in method update of dict object at 0x7e60bb884800> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7268.1 | <built-in method update of dict object at 0x7e6110a55f00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7322.1 | <built-in method update of dict object at 0x7e60eb227e80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7429.2 | <built-in method update of dict object at 0x7e60eb226c40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7457.1 | <built-in method update of dict object at 0x7e60eb2263c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7488.1 | <built-in method update of dict object at 0x7e6110a56980> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7522.1 | <built-in method update of dict object at 0x7e60bb8841c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7545.1 | <built-in method update of dict object at 0x7e60bb884dc0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7578.1 | <built-in method update of dict object at 0x7e60eb225c40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7613.1 | <built-in method update of dict object at 0x7e60bb884b40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7641.1 | <built-in method update of dict object at 0x7e6110a56e00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7690.1 | <built-in method update of dict object at 0x7e6110a56740> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7714.1 | <built-in method update of dict object at 0x7e6110a54740> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7742.1 | <built-in method update of dict object at 0x7e6110a54140> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7777.1 | <built-in method update of dict object at 0x7e6110a55000> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7808.2 | <built-in method update of dict object at 0x7e60bb884a00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7840.1 | <built-in method update of dict object at 0x7e60bb885340> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7875.1 | <built-in method update of dict object at 0x7e6110a55bc0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7896.1 | <built-in method update of dict object at 0x7e60eb224e00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7936.1 | <built-in method update of dict object at 0x7e60bb886480> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7980.1 | <built-in method update of dict object at 0x7e6110a54b80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8015.1 | <built-in method update of dict object at 0x7e60bb885180> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8108.2 | <built-in method update of dict object at 0x7e60bb885cc0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8122.1 | <built-in method update of dict object at 0x7e613cd84800> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8155.1 | <built-in method update of dict object at 0x7e6110a566c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8172.1 | <built-in method update of dict object at 0x7e6110a54540> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8197.1 | <built-in method update of dict object at 0x7e6110a57bc0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8220.1 | <built-in method update of dict object at 0x7e60bb885dc0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8267.1 | <built-in method update of dict object at 0x7e60eb225f40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | - | <built-in method update of dict object at 0x7e6110a56dc0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7551.1 | <built-in method update of dict object at 0x7e60bb915d40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7578.1 | <built-in method update of dict object at 0x7e60bb915880> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7613.1 | <built-in method update of dict object at 0x7e60eb25ce00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7641.1 | <built-in method update of dict object at 0x7e61118a4240> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7692.1 | <built-in method update of dict object at 0x7e61118a4d00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7717.1 | <built-in method update of dict object at 0x7e60bb914f00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7742.1 | <built-in method update of dict object at 0x7e60bb914f80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7787.1 | <built-in method update of dict object at 0x7e60bb917440> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7809.1 | <built-in method update of dict object at 0x7e60bb917180> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7840.1 | <built-in method update of dict object at 0x7e60bb914200> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7875.1 | <built-in method update of dict object at 0x7e60bb917980> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7913.1 | <built-in method update of dict object at 0x7e60bb917a80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7936.2 | <built-in method update of dict object at 0x7e60eb25e540> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7980.2 | <built-in method update of dict object at 0x7e60bb914540> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8017.1 | <built-in method update of dict object at 0x7e60eb224580> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8108.1 | <built-in method update of dict object at 0x7e60eb25eec0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8122.2 | <built-in method update of dict object at 0x7e60eb25f200> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8155.1 | <built-in method update of dict object at 0x7e60eb25ea00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8181.1 | <built-in method update of dict object at 0x7e60eb25df40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8197.1 | <built-in method update of dict object at 0x7e60eb25ff80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8221.1 | <built-in method update of dict object at 0x7e60eb25d9c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8267.1 | <built-in method update of dict object at 0x7e6110a55a00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | - | <built-in method update of dict object at 0x7e60eb25f6c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8027.1 | <built-in method update of dict object at 0x7e6110a56b80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8108.1 | <built-in method update of dict object at 0x7e60eb227640> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8120.1 | <built-in method update of dict object at 0x7e6110cf5940> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8158.1 | <built-in method update of dict object at 0x7e6107e465c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8182.1 | <built-in method update of dict object at 0x7e60a87b5bc0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8197.1 | <built-in method update of dict object at 0x7e6107e445c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8218.1 | <built-in method update of dict object at 0x7e60a87b6b80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8269.1 | <built-in method update of dict object at 0x7e60baa34b40> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:clearscada:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:* |