Schneider Electric Scada Expert Clearscada vulnerabilities

3 CVEs affecting Schneider Electric Scada Expert Clearscada, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-5413, published 2014-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-5412, published 2014-09-18. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.
CVE-2014-5411, published 2014-09-18. Low severity, CVSS 3.5. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script…
CVE-2014-5413, published 2014-09-18. Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days. Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a…