IM
IronMonkey Threat Research

CVE-2023-22610 CRITICAL

Published: 2023-01-31 | Last Modified: 2024-11-21 | Status: Modified

Description

A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.

Additional Descriptions (1)

Existe una vulnerabilidad CWE-863: autorización incorrecta que podría causar denegación de servicio contra el servidor Geo SCADA cuando se envían mensajes específicos al servidor a través del puerto TCP del servidor de base de datos.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-863
[email protected] Secondary
en NVD-CWE-Other

Affected Products

Vendor Product Version Update Type
schneider-electric ecostruxure_geo_scada_expert_2019 - <built-in method update of dict object at 0x7e60eb24c9c0> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7268.1 <built-in method update of dict object at 0x7e60eb24ff00> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7322.1 <built-in method update of dict object at 0x7e60eb24ddc0> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7429.2 <built-in method update of dict object at 0x7e60eb24ea00> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7457.1 <built-in method update of dict object at 0x7e60eb24ff40> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7488.1 <built-in method update of dict object at 0x7e60eb24e200> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7522.1 <built-in method update of dict object at 0x7e60eb24f740> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7545.1 <built-in method update of dict object at 0x7e60eb24f540> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7578.1 <built-in method update of dict object at 0x7e613c47d4c0> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7613.1 <built-in method update of dict object at 0x7e60eb24cc40> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7641.1 <built-in method update of dict object at 0x7e6110d41800> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7690.1 <built-in method update of dict object at 0x7e60eb24d8c0> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7714.1 <built-in method update of dict object at 0x7e60e846f0c0> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7742.1 <built-in method update of dict object at 0x7e60b9fead80> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7777.1 <built-in method update of dict object at 0x7e60eb24fa40> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7808.2 <built-in method update of dict object at 0x7e60eb24c2c0> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7840.1 <built-in method update of dict object at 0x7e60eb24ef80> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7875.1 <built-in method update of dict object at 0x7e60eb24f7c0> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7896.1 <built-in method update of dict object at 0x7e60eb24e700> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7936.1 <built-in method update of dict object at 0x7e60eb24f1c0> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.7980.1 <built-in method update of dict object at 0x7e60eb24c640> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.8015.1 <built-in method update of dict object at 0x7e60eb24e380> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.8108.2 <built-in method update of dict object at 0x7e60eb24dc80> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.8122.1 <built-in method update of dict object at 0x7e60eb24ec40> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.8155.1 <built-in method update of dict object at 0x7e60eb24dd40> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.8172.1 <built-in method update of dict object at 0x7e60eb24c6c0> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.8197.1 <built-in method update of dict object at 0x7e60eb24de80> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.8220.1 <built-in method update of dict object at 0x7e6110d40140> Application
schneider-electric ecostruxure_geo_scada_expert_2019 81.8267.1 <built-in method update of dict object at 0x7e60ba2a7f00> Application
schneider-electric ecostruxure_geo_scada_expert_2020 - <built-in method update of dict object at 0x7e60eb2d8780> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7551.1 <built-in method update of dict object at 0x7e60eb24fcc0> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7578.1 <built-in method update of dict object at 0x7e60b9fb4580> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7613.1 <built-in method update of dict object at 0x7e60ba2a6340> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7641.1 <built-in method update of dict object at 0x7e60ba2a48c0> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7692.1 <built-in method update of dict object at 0x7e60ba2a4800> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7717.1 <built-in method update of dict object at 0x7e60ba2a7ac0> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7742.1 <built-in method update of dict object at 0x7e60ba2a5900> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7787.1 <built-in method update of dict object at 0x7e60ba2a5180> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7809.1 <built-in method update of dict object at 0x7e60b9fb4bc0> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7840.1 <built-in method update of dict object at 0x7e60a8be5580> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7875.1 <built-in method update of dict object at 0x7e60ba0ace40> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7913.1 <built-in method update of dict object at 0x7e60a8be6040> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7936.2 <built-in method update of dict object at 0x7e60b9fb5740> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.7980.2 <built-in method update of dict object at 0x7e60ba0af7c0> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.8017.1 <built-in method update of dict object at 0x7e613c3516c0> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.8108.1 <built-in method update of dict object at 0x7e60bae0c880> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.8122.2 <built-in method update of dict object at 0x7e6110d41b40> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.8155.1 <built-in method update of dict object at 0x7e60bae4a080> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.8181.1 <built-in method update of dict object at 0x7e60a8be7bc0> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.8197.1 <built-in method update of dict object at 0x7e60a8be6680> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.8221.1 <built-in method update of dict object at 0x7e60eb2182c0> Application
schneider-electric ecostruxure_geo_scada_expert_2020 83.8267.1 <built-in method update of dict object at 0x7e6107bc8f80> Application
schneider-electric ecostruxure_geo_scada_expert_2021 - <built-in method update of dict object at 0x7e6112cca580> Application
schneider-electric ecostruxure_geo_scada_expert_2021 84.8027.1 <built-in method update of dict object at 0x7e60e846e500> Application
schneider-electric ecostruxure_geo_scada_expert_2021 84.8108.1 <built-in method update of dict object at 0x7e60bac6f680> Application
schneider-electric ecostruxure_geo_scada_expert_2021 84.8120.1 <built-in method update of dict object at 0x7e60eb2e1580> Application
schneider-electric ecostruxure_geo_scada_expert_2021 84.8158.1 <built-in method update of dict object at 0x7e60bac6ce40> Application
schneider-electric ecostruxure_geo_scada_expert_2021 84.8182.1 <built-in method update of dict object at 0x7e60bae0f400> Application
schneider-electric ecostruxure_geo_scada_expert_2021 84.8197.1 <built-in method update of dict object at 0x7e60e8f93a40> Application
schneider-electric ecostruxure_geo_scada_expert_2021 84.8218.1 <built-in method update of dict object at 0x7e60e8f90400> Application
schneider-electric ecostruxure_geo_scada_expert_2021 84.8269.1 <built-in method update of dict object at 0x7e6110d41e00> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:*
Notification
Message here