CVE-2014-5412

MEDIUM 5.0CVE-2014-5412 · Published 18/09/2014 · updated 17/06/2026

In short

CVE-2014-5412 is a MEDIUM (CVSS 5.0) vulnerability affecting clearscada (aveva), scada expert clearscada (schneider-electric).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
clearscada aveva	`= 2010= 2013`	No fix yet
scada expert clearscada schneider-electric	`= 2013= 2014`	No fix yet

Description

Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.

References

cisagov/CSAF
cisa.gov/news-events/ics-advisories/icsa-14-259-01a
ics-cert.us-cert.gov/advisories/ICSA-14-259-01 · Third Party Advisory

More vulnerabilities in clearscada

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2014-5412 is a MEDIUM (CVSS 5.0) vulnerability affecting clearscada (aveva), scada expert clearscada (schneider-electric).

Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.4% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

clearscada

aveva

= 2010= 2013

No fix yet

scada expert clearscada

schneider-electric

= 2013= 2014

No fix yet

More vulnerabilities in clearscada

See all →