What’s Vulnerable › Vulnerabilities

CVE-2014-5413: Schneider Electric SCADA Expert ClearSCADA Cryptographic Issues

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-09-18 · updated 2026-06-17
• Weakness: CWE-310

Description

Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm.

Affected products

• Schneider Electric SE ClearSCADA: 2010-r3, 2010-r3.1, 2013-r1, 2013-r1.1, 2013-r1.1a, 2013-r1.2 (+1)
• Schneider Electric SCADA Expert ClearSCADA: 2013-r2.1, 2014-r1

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a
• https://ics-cert.us-cert.gov/advisories/ICSA-14-259-01

Get alerted when CVE-2014-5413 or the next vulnerability affects your stack