A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Versions prior to October 2022)
Existe una vulnerabilidad CWE-200: Exposición de información confidencial a un actor no autorizado que podría provocar la divulgación de información cuando se envían mensajes específicos al servidor a través del puerto TCP del servidor de la base de datos. Productos afectados: EcoStruxure Geo SCADA Expert 2019 - 2021 (anteriormente conocido como ClearSCADA) (Versiones anteriores a octubre de 2022)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-200
|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | ecostruxure_geo_scada_expert_2019 | - | <built-in method update of dict object at 0x7e60e832fcc0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7268.1 | <built-in method update of dict object at 0x7e60e832c6c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7322.1 | <built-in method update of dict object at 0x7e60a8a56c40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7429.2 | <built-in method update of dict object at 0x7e6111e1bb40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7457.1 | <built-in method update of dict object at 0x7e60e832de00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7488.1 | <built-in method update of dict object at 0x7e60e832c3c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7522.1 | <built-in method update of dict object at 0x7e6071e57800> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7545.1 | <built-in method update of dict object at 0x7e61342cf840> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7578.1 | <built-in method update of dict object at 0x7e6110f845c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7613.1 | <built-in method update of dict object at 0x7e60e832e340> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7641.1 | <built-in method update of dict object at 0x7e60e8343240> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7690.1 | <built-in method update of dict object at 0x7e60a8a57400> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7714.1 | <built-in method update of dict object at 0x7e60a8a56ac0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7742.1 | <built-in method update of dict object at 0x7e6112cb5900> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7777.1 | <built-in method update of dict object at 0x7e60bafad740> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7808.2 | <built-in method update of dict object at 0x7e60a8ba96c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7840.1 | <built-in method update of dict object at 0x7e60a8a56400> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7875.1 | <built-in method update of dict object at 0x7e6106844a00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7896.1 | <built-in method update of dict object at 0x7e6110f85680> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7936.1 | <built-in method update of dict object at 0x7e6111e18700> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.7980.1 | <built-in method update of dict object at 0x7e60e8342e80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8015.1 | <built-in method update of dict object at 0x7e60e8343900> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8108.2 | <built-in method update of dict object at 0x7e60a8a54d40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8122.1 | <built-in method update of dict object at 0x7e60bafac300> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8155.1 | <built-in method update of dict object at 0x7e6110f87d40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8172.1 | <built-in method update of dict object at 0x7e60a8a54880> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8197.1 | <built-in method update of dict object at 0x7e6106845e00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8220.1 | <built-in method update of dict object at 0x7e60e832cec0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2019 | 81.8267.1 | <built-in method update of dict object at 0x7e60e8343a40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | - | <built-in method update of dict object at 0x7e60e832d780> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7551.1 | <built-in method update of dict object at 0x7e6111e19100> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7578.1 | <built-in method update of dict object at 0x7e6111e1ad80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7613.1 | <built-in method update of dict object at 0x7e60e832db00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7641.1 | <built-in method update of dict object at 0x7e60e832db40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7692.1 | <built-in method update of dict object at 0x7e60bafadf00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7717.1 | <built-in method update of dict object at 0x7e60e832fb40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7742.1 | <built-in method update of dict object at 0x7e60a8b7ce40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7787.1 | <built-in method update of dict object at 0x7e60a8bab000> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7809.1 | <built-in method update of dict object at 0x7e60e832d880> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7840.1 | <built-in method update of dict object at 0x7e60ba2a7780> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7875.1 | <built-in method update of dict object at 0x7e6071e54e40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7913.1 | <built-in method update of dict object at 0x7e60a8b7e440> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7936.2 | <built-in method update of dict object at 0x7e60a8a579c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.7980.2 | <built-in method update of dict object at 0x7e60e846c780> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8017.1 | <built-in method update of dict object at 0x7e6071e556c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8108.1 | <built-in method update of dict object at 0x7e60bb886d40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8122.2 | <built-in method update of dict object at 0x7e60a8b7ec80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8155.1 | <built-in method update of dict object at 0x7e60a8a557c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8181.1 | <built-in method update of dict object at 0x7e60bb886f80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8197.1 | <built-in method update of dict object at 0x7e6071e57b80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8221.1 | <built-in method update of dict object at 0x7e60a8a54600> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2020 | 83.8267.1 | <built-in method update of dict object at 0x7e60e832e940> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | - | <built-in method update of dict object at 0x7e6071e56f80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8027.1 | <built-in method update of dict object at 0x7e6071e563c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8108.1 | <built-in method update of dict object at 0x7e60bb8875c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8120.1 | <built-in method update of dict object at 0x7e60bafafc40> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8158.1 | <built-in method update of dict object at 0x7e6071e56b00> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8182.1 | <built-in method update of dict object at 0x7e60a8b7dd80> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8197.1 | <built-in method update of dict object at 0x7e60a8b7f8c0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8218.1 | <built-in method update of dict object at 0x7e60a8b7ebc0> | Application |
| schneider-electric | ecostruxure_geo_scada_expert_2021 | 84.8269.1 | <built-in method update of dict object at 0x7e60a8b7f940> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:* |