Schneider Electric ClearSCADA

Risk Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

CVEs (1)

Remediations

• ClearSCADA 2014 R1.1 hotfix build 75.6239
• ClearSCADA 2015 R1.1 Service Pack (build 76.6191)
• ClearSCADA 2015 R2 hotfix build 77.6181
• Users of ClearSCADA 2013 R2 and prior versions should upgrade to the latest ClearSCADA 2015 R2 hotfix to mitigate the vulnerability.
• Each of the Service Pack and hotfixes above are available for direct download from Schneider Electric's web site at:
• More information can be found by visiting Schneider Electric's Security Notification at:
• Secure physical and network interfaces to the ClearSCADA system.
• Deploy suitably configured firewalls between network segments to limit access to ports and protocols appropriately.
• Deploy VPN technology with secure authentication on any externally accessible networks.
• Configure and audit user security to reduce the risk of a denial of service.
• For critical accounts use ClearSCADA security policy configuration to disable invalid logon count and delayed lockout time and to use logon throttling.

Affected Vendors

Affected Products (4)