Schneider Electric Citect Anywhere vulnerabilities

4 CVEs affecting Schneider Electric Citect Anywhere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-7972, published 2017-09-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-7971, published 2017-09-26. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the use of…
CVE-2017-7969, published 2017-09-26. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2…
CVE-2017-7970, published 2017-09-26. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to…
CVE-2017-7972, published 2017-09-26. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to…