Schneider.Electric.ClearSCADA.Remote.Authentication.Bypass

Description

This indicates an attack attempt to exploit an Authentication Bypass vulnerability in Schneider Electric SCADA Expert ClearSCADA.
The vulnerability is due an exception that occurs in the dbserver.exe file during authentication process. A remote attacker can exploit this to gain unauthorized access to diagnostic information without proper authentication.

Affected Products

Schneider Electric ClearSCADA 2010 R1.0; ClearSCADA 2009; ClearSCADA 2007; ClearSCADA 2005

Impact

Authentication Bypass: Remote attackers can bypass security checks of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
http://resourcecenter.controlmicrosystems.com/display/public/CS/SCADA+Expert+ClearSCADA+Support

References