CVE-2023-22610: Critical severity schneider electric ecostruxure geo scada expert vulnerability
Published Jan 31, 2023
·Updated
A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.
Affected Software
61 affected components
Schneider-electric Ecostruxure Geo Scada Expert 2019
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7268.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7322.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7429.2
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7457.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7488.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7522.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7545.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7578.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7613.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7641.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7690.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7714.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7742.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7777.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7808.2
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7840.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7875.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7896.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7936.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.7980.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.8015.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.8108.2
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.8122.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.8155.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.8172.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.8197.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.8220.1
Schneider-electric Ecostruxure Geo Scada Expert 2019=81.8267.1
Schneider-electric Ecostruxure Geo Scada Expert 2020
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7551.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7578.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7613.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7641.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7692.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7717.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7742.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7787.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7809.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7840.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7875.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7913.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7936.2
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.7980.2
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.8017.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.8108.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.8122.2
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.8155.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.8181.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.8197.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.8221.1
Schneider-electric Ecostruxure Geo Scada Expert 2020=83.8267.1
Schneider-electric Ecostruxure Geo Scada Expert 2021
Schneider-electric Ecostruxure Geo Scada Expert 2021=84.8027.1
Schneider-electric Ecostruxure Geo Scada Expert 2021=84.8108.1
Schneider-electric Ecostruxure Geo Scada Expert 2021=84.8120.1
Schneider-electric Ecostruxure Geo Scada Expert 2021=84.8158.1
Schneider-electric Ecostruxure Geo Scada Expert 2021=84.8182.1
Schneider-electric Ecostruxure Geo Scada Expert 2021=84.8197.1
Schneider-electric Ecostruxure Geo Scada Expert 2021=84.8218.1
Schneider-electric Ecostruxure Geo Scada Expert 2021=84.8269.1
Remediation
Event History
Jan 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-22610?
CVE-2023-22610 has been rated with a severity score that indicates a critical vulnerability due to potential Denial of Service against the Geo SCADA server.
2
How do I fix CVE-2023-22610?
To mitigate CVE-2023-22610, users should update their Ecostruxure Geo SCADA Expert software to the latest version provided by Schneider Electric.
3
What systems are affected by CVE-2023-22610?
CVE-2023-22610 affects multiple versions of Schneider Electric's Ecostruxure Geo SCADA Expert 2019, 2020, and 2021.
4
What can exploit CVE-2023-22610?
CVE-2023-22610 can be exploited by sending specific messages over the database server TCP port to the Geo SCADA server.
5
Is there a workaround for CVE-2023-22610?
Currently, users are advised to apply the security patch provided by Schneider Electric as the primary method to address CVE-2023-22610.