CVEvulnerability

CVE-2017-7971

6.5 MEDIUM Published 2017-09-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-09-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-295

Description

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the use of outdated cipher suites and improper verification of peer SSL Certificate.

Affected configurations

• schneider-electric powerscada anywhere 1.0 • schneider-electric citect anywhere 1.0

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

Referenced by CWE · observed example (1)

  • CWE-1240 Use of a Cryptographic Primitive with a Risky Implementation weakness

References