Vulnerabilities > CVE-2023-22610 - Incorrect Authorization vulnerability in Schneider-Electric products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
schneider-electric
CWE-863
NVD
Published: 2023-01-31
Updated: 2023-06-14

Summary

A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.

Vulnerable Configurations

Part Description Count
Application
Schneider-Electric
61

Common Weakness Enumeration (CWE)

References