A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious…

published 2023-02-24 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-12633

cvss: 5.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 36%
public exploits: 0; none known

A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)

CISA SSVC

Exploitation: none
Automatable: yes
Technical impact: partial
Assessed: 21 mo ago (2025-02-05)

Exploit prediction

0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NVD	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Schneider Electric EcoStruxure Geo SCADA Expert 2019
Schneider Electric EcoStruxure Geo SCADA Expert 2020
Schneider Electric EcoStruxure Geo SCADA Expert 2021
Schneider Electric ClearSCADA

Classification

Weakness

CWE-117 Improper Output Neutralization for Logs
CWE-116 Improper Encoding or Escaping of Output

References

download.schneider-electric.com /files?p_Doc_Ref=SEVD-2023-045-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-01.pdf

Sources

CVE List CVE-2023-0595
NVD CVE-2023-0595

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary