VULNERABILITY INTELLIGENCE

CVE-2017-7970

CVSS score6.5 MEDIUM

EPSS probability0.56%

CISA KEVNot currently listed

Published2017-09-26

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to specify Arbitrary Server Target Nodes in connection requests to the Secure Gateway and Server components.

Primary references

cybersecurity@se.com — Mitigation, Patch, Vendor Advisory
cybersecurity@se.com — Third Party Advisory, VDB Entry
cybersecurity@se.com — Issue Tracking, Mitigation, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Mitigation, Patch, Vendor Advisory