A vulnerable version of Schneider Electric SCADA Expert ClearSCADA has been detected.
Description
Schneider Electric SCADA Expert ClearSCADA versions 2005, 2007, 2009, and 2010 < 2010 R1.1 are prone to a remote authentication bypass vulnerability because of improper exception handling. Specifically, this issue affects the 'dbserver.exe' file. An attacker may exploit this issue to gain access to sensitive information and modify certain functions.
Solution
Upgrade to SCADA Expert ClearSCADA version 2009 R2.4, 2010 R1.1, or later.
