PT-2014-6459 · Schneider Electric · Struxureware Scada Expert Clearscada

Publicado 2014-09-18 · Atualizado 2025-11-04 · CVE-2014-5412

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Schneider Electric StruxureWare SCADA Expert ClearSCADA versions 2010 R3 through 2014 R1

Description The issue allows remote attackers to read database records by leveraging access to the guest account.

Recommendations For versions 2010 R3 through 2014 R1, consider restricting access to the guest account to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

CWE-264

Identificadores relacionados

CVE-2014-5412

Produtos afetados

Struxureware Scada Expert Clearscada

Referências · 5

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json · Nota
• https://cisa.gov/news-events/ics-advisories/icsa-14-259-01a · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5412 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-14-259-01 · Nota
• https://t.me/cveNotify/141742 · Publicação no Telegram