Schneider Electric Ecostruxure Geo Scada Expert 2021 vulnerabilities

3 CVEs affecting Schneider Electric Ecostruxure Geo Scada Expert 2021, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-0595, published 2023-02-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-22610, published 2023-01-31. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP…
CVE-2023-22611, published 2023-01-31. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database…
CVE-2023-0595, published 2023-02-24. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port…