PT-2021-7777 · Schneider Electric · Scadapack Remoteconnect For X70+2

Published 2021-07-13 · Updated 2021-07-26 · CVE-2021-22781

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions EcoStruxure Control Expert versions prior to V15.0 SP1 EcoStruxure Process Expert (all versions) SCADAPack RemoteConnect for x70 (all versions)

Description The issue is related to insufficiently protected credentials, which could lead to a leak of SMTP credentials used for mailbox authentication when an attacker gains access to a project file. This could allow an attacker to obtain unauthorized access to the credentials.

Recommendations For EcoStruxure Control Expert versions prior to V15.0 SP1, update to V15.0 SP1 or later to resolve the issue. For EcoStruxure Process Expert, restrict access to project files to minimize the risk of exploitation until a fix is available. For SCADAPack RemoteConnect for x70, avoid using the affected software for mailbox authentication until the issue is resolved.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

BDU:2023-02717

CVE-2021-22781

Affected Products

Ecostruxure Control Expert

Ecostruxure Process Expert

Scadapack Remoteconnect For X70

References · 7

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22781 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22781 · Security Note
• https://bdu.fstec.ru/vul/2023-02717 · Security Note
• https://t.me/cibsecurity/26148 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-21-194-02 · Note
• https://vuldb.com/ru/?id.178681 · Note