CVE-2014-5412: vulnerability in Schneider Electric SCADA Expert ClearSCADA
Schneider Electric SCADA Expert ClearSCADA Improper Authentication
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.4epss 1.6%
Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.
AV:N/AC:L/Au:N/C:P/I:P/A:N
Related CVEs — Schneider Electric SCADA Expert ClearSCADA
In the same product, most dangerous first.
CVE-2014-0779—Schneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.5%CVE-2014-5411—Schneider Electric SCADA Expert ClearSCADA Cross-site ScriptingEPSS 1.3%CVE-2014-5413—Schneider Electric SCADA Expert ClearSCADA Cryptographic IssuesEPSS 1.0%CVE-2023-0595MEDIUMCVE-2023-0595EPSS 0.4%