VULNERABILITY INTELLIGENCE

CVE-2017-7971

CVSS score6.5 MEDIUM

EPSS probability0.78%

CISA KEVNot currently listed

Published2017-09-26

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the use of outdated cipher suites and improper verification of peer SSL Certificate.

Weakness classification

CWE-295: Improper Certificate Validation

Primary references

cybersecurity@se.com — Mitigation, Patch, Vendor Advisory
cybersecurity@se.com — Third Party Advisory, VDB Entry
cybersecurity@se.com — Issue Tracking, Mitigation, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Mitigation, Patch, Vendor Advisory