Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:DOS:SCHNEIDER-EXPRT-SCADA |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Schneider Electric SCADA Expert ClearSCADA Denial of Service |
Release Date |
2014/10/20 |
Update Number |
2431 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Schneider Electric SCADA Expert ClearSCADA Denial of Service
This signature detects attempts to exploit a known vulnerability against Schneider Electric SCADA Expert ClearSCADA. A successful attack can result in a denial-of-service condition.
Extended Description
Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Products
- Aveva clearscada 2010
- Aveva clearscada 2013
- Schneider-electric scada_expert_clearscada 2013
- Schneider-electric scada_expert_clearscada 2014
References
- CVE: CVE-2014-5411