CVE-2022-24319: vulnerability in ClearSCADA (All Versions), EcoStruxure Geo…
Published · Updated
Follow this CVE+ Monitor ClearSCADA, EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.6%
A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA web server are intercepted. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)