CVE-2014-5413: vulnerability in Schneider Electric SCADA Expert ClearSCADA
Schneider Electric SCADA Expert ClearSCADA Cryptographic Issues
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.4epss 1.0%
Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm.
AV:N/AC:L/Au:N/C:P/I:P/A:N
Related CVEs — Schneider Electric SCADA Expert ClearSCADA
In the same product, most dangerous first.
CVE-2014-5412—Schneider Electric SCADA Expert ClearSCADA Improper AuthenticationEPSS 1.6%CVE-2014-0779—Schneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory BufferEPSS 1.5%CVE-2014-5411—Schneider Electric SCADA Expert ClearSCADA Cross-site ScriptingEPSS 1.3%CVE-2023-0595MEDIUMCVE-2023-0595EPSS 0.4%