CVE-2014-5413

MEDIUM · 6.4 CVSS Gepubliceerd: 18-09-2014 CWE-310

Beschrijving

Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm.

Vendors

Aveva Schneider-electric

Affected products

Clearscada Scada Expert Clearscada

References

github.com
www.cisa.gov
ics-cert.us-cert.gov