CVE-2021-22741
First published: Wed May 26 2021(Updated: )
Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior), which could cause the revealing of account credentials when server database files are available. Exposure of these files to an attacker can make the system vulnerable to password decryption attacks. Note that “.sde” configuration export files do not contain user account password hashes.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Clearscada | ||
| Schneider-electric Ecostruxure Geo Scada Expert 2019 | ||
| Schneider-electric Ecostruxure Geo Scada Expert 2020 | <=83.7742.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this ClearSCADA vulnerability?
The vulnerability ID for this ClearSCADA vulnerability is CVE-2021-22741.
What is the severity of CVE-2021-22741?
The severity of CVE-2021-22741 is medium with a CVSS score of 6.7.
Which software versions are affected by CVE-2021-22741?
ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior) are affected by CVE-2021-22741.
How can CVE-2021-22741 be exploited?
CVE-2021-22741 can be exploited to reveal account credentials from the server database.
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-22741?
The Common Weakness Enumeration (CWE) ID for CVE-2021-22741 is 916.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric clearscada
- canonical/schneider-electric ecostruxure geo scada expert 2019
- canonical/schneider-electric ecostruxure geo scada expert 2020
- version/schneider-electric ecostruxure geo scada expert 2020/83.7742.1