CVE-2017-7971
Severity Score
6.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the use of outdated cipher suites and improper verification of peer SSL Certificate.
Existe una vulnerabilidad en la versión 1.0 de PowerSCADA Anywhere de Schneider Electric redistribuida con PowerSCADA Expert 8.1, PowerSCADA Expert 8.2 y Citect Anywhere 1.0 que permite que se utilicen suites de cifrado obsoletas y se verifique incorrectamente el certificado Peer SSL.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-04-19 CVE Reserved
- 2017-09-25 CVE Published
- 2023-04-21 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-295: Improper Certificate Validation
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/99913 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Powerscada Anywhere Search vendor "Schneider-electric" for product "Powerscada Anywhere" | 1.0 Search vendor "Schneider-electric" for product "Powerscada Anywhere" and version "1.0" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerscada Expert Search vendor "Schneider-electric" for product "Powerscada Expert" | 8.1 Search vendor "Schneider-electric" for product "Powerscada Expert" and version "8.1" | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerscada Anywhere Search vendor "Schneider-electric" for product "Powerscada Anywhere" | 1.0 Search vendor "Schneider-electric" for product "Powerscada Anywhere" and version "1.0" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerscada Expert Search vendor "Schneider-electric" for product "Powerscada Expert" | 8.2 Search vendor "Schneider-electric" for product "Powerscada Expert" and version "8.2" | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Citect Anywhere Search vendor "Schneider-electric" for product "Citect Anywhere" | 1.0 Search vendor "Schneider-electric" for product "Citect Anywhere" and version "1.0" | - |
Affected
| ||||||