CVEvulnerability
CVE-2014-5413
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-310
Description
Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm.
Affected configurations
• aveva clearscada 2010
• aveva clearscada 2013
• schneider-electric scada expert clearscada 2013
• schneider-electric scada expert clearscada 2014
Related
Weakness · not in database (1)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json github.com
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a www.cisa.gov
- https://ics-cert.us-cert.gov/advisories/ICSA-14-259-01 Third Party Advisory, US Government Resource