PT-2022-16603 · Schneider Electric · Ecostruxure Geo Scada Expert 2020+2

Cameron Stokes · Published 2022-02-09 · Updated 2022-04-22 · CVE-2022-24319

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ClearSCADA (All Versions) EcoStruxure Geo SCADA Expert 2019 (All Versions) EcoStruxure Geo SCADA Expert 2020 (All Versions)

Description A CWE-295: Improper Certificate Validation issue exists, allowing a Man-in-the-Middle attack when communications between the client and Geo SCADA web server are intercepted. This could potentially compromise the security of the data being transmitted.

Recommendations For ClearSCADA, consider implementing proper certificate validation to prevent Man-in-the-Middle attacks. For EcoStruxure Geo SCADA Expert 2019, ensure that all communications with the Geo SCADA web server are securely encrypted and validated. For EcoStruxure Geo SCADA Expert 2020, restrict access to the Geo SCADA web server until a proper certificate validation mechanism is in place.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2022-24319

Affected Products

Clearscada

Ecostruxure Geo Scada Expert 2019

Ecostruxure Geo Scada Expert 2020

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-24319 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05 · Vendor Advisory
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0018/MNDT-2022-0018.md · Note
• https://t.me/cvenotify/28139 · Telegram Post
• https://t.me/cibsecurity/37161 · Telegram Post