Unrated severityNVD Advisory· Published Feb 24, 2023· Updated Feb 5, 2025

CVE-2023-0595

Description

A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)

Affected products

Schneider Electric/EcoStruxure Geo SCADA Expertllm-fuzzy4 versions
2019, 2020, 2021 (prior to October 2022)+ 3 more
- (no CPE)range: 2019, 2020, 2021 (prior to October 2022)
- (no CPE)range: All
- (no CPE)range: All
- (no CPE)range: All
Aveva/Clearscadallm-fuzzy
Schneider Electric/SCADA Expert Clearscadacpe-rescue
Range: All Versions

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2023-0595

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions