PT-2022-16606 · Schneider Electric · Ecostruxure Geo Scada Expert 2020+2

Published 2022-02-09 · Updated 2022-02-16 · CVE-2022-24321

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ClearSCADA versions all EcoStruxure Geo SCADA Expert 2019 versions all EcoStruxure Geo SCADA Expert 2020 versions all

Description A vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. This issue is related to improper check for unusual or exceptional conditions.

Recommendations For ClearSCADA all versions, update to a version that includes a fix for this issue. For EcoStruxure Geo SCADA Expert 2019 all versions, update to a version that includes a fix for this issue. For EcoStruxure Geo SCADA Expert 2020 all versions, update to a version that includes a fix for this issue.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2022-24321

Affected Products

Clearscada

Ecostruxure Geo Scada Expert 2019

Ecostruxure Geo Scada Expert 2020

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2022-24321 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05 · Vendor Advisory