PT-2022-16605 · Schneider Electric · Ecostruxure Geo Scada Expert 2020+2

Cameron Stokes · Published 2022-02-09 · Updated 2022-04-22 · CVE-2022-24320

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ClearSCADA (All Versions) EcoStruxure Geo SCADA Expert 2019 (All Versions) EcoStruxure Geo SCADA Expert 2020 (All Versions)

Description A CWE-295: Improper Certificate Validation issue exists, allowing a Man-in-the-Middle attack when communications between the client and Geo SCADA database server are intercepted. This could potentially compromise the security of the data being transmitted.

Recommendations For ClearSCADA, consider implementing proper certificate validation to prevent Man-in-the-Middle attacks. For EcoStruxure Geo SCADA Expert 2019, ensure that all communications with the Geo SCADA database server are securely encrypted and validated. For EcoStruxure Geo SCADA Expert 2020, restrict access to the Geo SCADA database server to minimize the risk of exploitation until a proper fix is applied. As a temporary workaround, consider disabling the communication between the client and Geo SCADA database server until a patch is available.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2022-24320

Affected Products

Clearscada

Ecostruxure Geo Scada Expert 2019

Ecostruxure Geo Scada Expert 2020

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-24320 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05 · Vendor Advisory
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0019/MNDT-2022-0019.md · Note
• https://t.me/cibsecurity/37163 · Telegram Post
• https://t.me/cvenotify/28146 · Telegram Post