CVE-2023-0595: schneider electric clearscada Improper Output Neutralization for Logs
Vulnerability summary
CVE-2023-0595 is a medium (CVSS 5.3) Improper Output Neutralization for Logs vulnerability in schneider electric clearscada. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 34.6% of scored vulnerabilities.
Timeline
- 24-02-2023PublishedVulnerability first disclosed.
- 05-02-2025Last modifiedVulnerability information updated.
Description
A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST5.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS trend
Probability
0.42%
Chance of exploitation in the next 30 days
Percentile
35%
Versus all other CVEs
30-day change
0.00 pp
From 0.42% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-117Improper Output Neutralization for LogsThe product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.
- CWE-116Improper Encoding or Escaping of OutputThe product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
Affected systems
Schneider electric4 products
- clearscadaAll Versions
- ecostruxure geo scada expert 2019≥ All, ≤ October 2022
- ecostruxure geo scada expert 2020≥ All, ≤ October 2022
- ecostruxure geo scada expert 2021≥ All, ≤ October 2022
Schneider-electric3 products
- ecostruxure_geo_scada_expert_2019na | 81.7268.1 | 81.7322.1 | 81.7429.2 | 81.7457.1 | 81.7488.1 | 81.7522.1 | 81.7545.1 | 81.7578.1 | 81.7613.1 | 81.7641.1 | 81.7690.1 | 81.7714.1 | 81.7742.1 | 81.7777.1 | 81.7808.2 | 81.7840.1 | 81.7875.1 | 81.7896.1 | 81.7936.1 | 81.7980.1 | 81.8015.1 | 81.8108.2 | 81.8122.1 | 81.8155.1 | 81.8172.1 | 81.8197.1 | 81.8220.1 | 81.8267.1
- ecostruxure_geo_scada_expert_2020na | 83.7551.1 | 83.7578.1 | 83.7613.1 | 83.7641.1 | 83.7692.1 | 83.7717.1 | 83.7742.1 | 83.7787.1 | 83.7809.1 | 83.7840.1 | 83.7875.1 | 83.7913.1 | 83.7936.2 | 83.7980.2 | 83.8017.1 | 83.8108.1 | 83.8122.2 | 83.8155.1 | 83.8181.1 | 83.8197.1 | 83.8221.1 | 83.8267.1
- ecostruxure_geo_scada_expert_2021na | 84.8027.1 | 84.8108.1 | 84.8120.1 | 84.8158.1 | 84.8182.1 | 84.8197.1 | 84.8218.1 | 84.8269.1
2 vendors · 7 products