CVE-2014-5411CWE-79

CVE-2014-5411: vulnerability in Schneider Electric SCADA Expert ClearSCADA

Schneider Electric SCADA Expert ClearSCADA Cross-site Scripting

Published · Updated

Follow this CVE+ Monitor ClearSCADA+ Monitor SCADA Expert ClearSCADA

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.9epss 1.3%
Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
AV:N/AC:H/Au:S/C:N/I:N/A:C
Affected products
Schneider Electric · ClearSCADASchneider Electric · SCADA Expert ClearSCADA
Related CVEs — Schneider Electric SCADA Expert ClearSCADA

In the same product, most dangerous first.

CVE-2014-5412—Schneider Electric SCADA Expert ClearSCADA Improper AuthenticationEPSS 1.6%CVE-2014-0779—Schneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.5%CVE-2014-5413—Schneider Electric SCADA Expert ClearSCADA Cryptographic IssuesEPSS 1.0%CVE-2023-0595MEDIUMCVE-2023-0595EPSS 0.4%