CVE-2021-22741: Medium severity schneider electric clearscada vulnerability
Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior), which could cause the revealing of account credentials when server database files are available. Exposure of these files to an attacker can make the system vulnerable to password decryption attacks. Note that “.sde” configuration export files do not contain user account password hashes.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this ClearSCADA vulnerability?
The vulnerability ID for this ClearSCADA vulnerability is CVE-2021-22741.
What is the severity of CVE-2021-22741?
The severity of CVE-2021-22741 is medium with a CVSS score of 6.7.
Which software versions are affected by CVE-2021-22741?
ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior) are affected by CVE-2021-22741.
How can CVE-2021-22741 be exploited?
CVE-2021-22741 can be exploited to reveal account credentials from the server database.
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-22741?
The Common Weakness Enumeration (CWE) ID for CVE-2021-22741 is 916.