Vulnerabilities > CVE-2017-7970 - Unspecified vulnerability in Schneider-Electric Citect Anywhere and Powerscada Anywhere
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE low complexity
schneider-electric
Summary
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to specify Arbitrary Server Target Nodes in connection requests to the Secure Gateway and Server components.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |