virus logo Intrusion Prevention

Schneider.Electric.ClearSCADA.HTTP.Interface.XSS

description-logoDescription

This indicates an attack attempt to exploit a Denial Of Service vulnerability in Schneider Electric SCADA Expert ClearSCADA.
The vulnerability is due to an error in the application when handling incoming requests. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and uses his/her privilege to send a request which may causes denial of service conditions in the affected machine.

affected-products-logoAffected Products

Schneider Electric ClearSCADA 2010 prior to R3.2
Schneider Electric SCADA Expert ClearSCADA 2014 prior to R1.1

Impact logoImpact

Denial of Service: Remote attackers can crash vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor
http://resourcecenter.controlmicrosystems.com/display/public/CS/SCADA+Expert+ClearSCADA+Support

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

References

https://ics-cert.us-cert.gov/advisories/ICSA-14-259-01A https://ics-cert.us-cert.gov/advisories/ICSA-14-259-01
ID 39261
Created Nov 11, 2014
Updated Jul 28, 2017
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2014-5411
Exploit Prediction Score 0.52%
Default Action drop
Active
Affected OS Windows
Affected App Other