CVE-2017-7970
First published: Mon Sep 25 2017(Updated: )
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to specify Arbitrary Server Target Nodes in connection requests to the Secure Gateway and Server components.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Powerscada Anywhere | =1.0 | |
| Schneider Electric EcoStruxure Power SCADA Expert | =8.1 | |
| Schneider Electric EcoStruxure Power SCADA Expert | =8.2 | |
| Schneider Electric Citect Anywhere | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-7970?
CVE-2017-7970 has been assigned a moderate severity level due to its potential to allow unauthorized specification of server target nodes.
How do I fix CVE-2017-7970?
To fix CVE-2017-7970, it is advised to update vulnerable software versions of PowerSCADA Anywhere and Citect Anywhere to the latest patched versions.
Which versions are affected by CVE-2017-7970?
CVE-2017-7970 affects Schneider Electric's PowerSCADA Anywhere version 1.0 and Citect Anywhere version 1.0.
What potential impact does CVE-2017-7970 have?
The impact of CVE-2017-7970 can lead to unauthorized access to server nodes, compromising the security of the system.
Is CVE-2017-7970 exploitable remotely?
Yes, CVE-2017-7970 is exploitable remotely, which increases its risk profile for systems exposed to the internet.
- agent/remedy
- agent/type
- agent/author
- agent/references
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/schneider-electric
- canonical/schneider-electric powerscada anywhere
- version/schneider-electric powerscada anywhere/1.0
- canonical/schneider electric ecostruxure power scada expert
- version/schneider electric ecostruxure power scada expert/8.1
- version/schneider electric ecostruxure power scada expert/8.2
- canonical/schneider electric citect anywhere
- version/schneider electric citect anywhere/1.0