CVE-2014-5413 - CVE House
Back to Database
Status published Medium CVE-2014-5413

Schneider Electric SCADA Expert ClearSCADA Cryptographic Issues

Vulnerability Description

Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-5413

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Aditya Sood

References

More from Schneider Electric

View All →
CVE-2025-9997
CWE-78: Improper Neutralization of Special Elements used in an OS...
Medium 5.8
CVE-2025-9996
CWE-78: Improper Neutralization of Special Elements used in an OS...
Medium 5.8
CVE-2025-8453
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege...
High 8.4
CVE-2025-7746
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...
Medium 5.3
CVE-2025-6788
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists...
Medium 5.3

Affected Vendor

Schneider Electric

View all reports →

Affected Software

ClearSCADA, SCADA Expert ClearSCADA
Vulnerable Versions:
2010 R3 (build 72.4560), 2010 R3.1 (build 72.4644), 2010 R3.2, 2013 R1 (build 73.4729), 2013 R1.1 (build 73.4832), 2013 R1.1a (build 73.4903), 2013 R1.2 (build 73.4955), 2013 R2 (build 74.5094), 2013 R2.1 (build 74.5192), 2014 R1 (build 75.5210), 2014 R1.1

Timeline

Official Publish: September 18th, 2014
Last Modified: November 4th, 2025
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-310

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.