Schneider Electric EcoStruxure Geo SCADA Expert Multiple Vulnerabilities (SEVD-2023-010-02)

high Nessus Plugin ID 216851

Version 1.17

Nov 3, 2025, 9:25 PM

  • Logic Changes (Corrects handling base64 encoded HTTP cookies)

Plugin Feed: 202511032125

Version 1.16

Oct 27, 2025, 3:15 PM

  • Logic Changes (Gate HTTP debugging behind hidden preference)

Plugin Feed: 202510271515

Version 1.15

Oct 23, 2025, 3:11 AM

  • Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections)

Plugin Feed: 202510230311

Version 1.13

Oct 16, 2025, 4:39 PM

  • Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.)

Plugin Feed: 202510161639

Version 1.11

Oct 8, 2025, 9:19 AM

  • Logic Changes (Allow forking plugins to report all installs for structured vuln data.)

Plugin Feed: 202510080919

Version 1.10

Oct 1, 2025, 9:12 PM

  • Logic Changes (Adding support for user-supplied header added to all HTTP requests.)

Plugin Feed: 202510012112

Version 1.9

Sep 30, 2025, 12:41 AM

  • Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.)

Plugin Feed: 202509300041

Version 1.7

Sep 25, 2025, 3:39 PM

  • Exploit attributes ("Exploitability ease" set to "No known exploits are available")
  • CVSS metrics ("CVSSv2 score" set to 7.8)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N")
  • CVSS metrics ("CVSSv3 score" set to 7.5)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N")
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C")
  • CVSSv2 score source (changed from "CVE-2023-22610" to "CVE-2023-22611")
  • CVSSv2 severity (based on CVE-2023-22611, severity increased from "Medium" to "High")
  • Exploit attributes ("Exploit available" set to "False")

Plugin Feed: 202509251539

Version 1.6

Jul 15, 2025, 2:39 AM

  • Logic Changes

Plugin Feed: 202507150239

Version 1.5

Jul 10, 2025, 5:41 PM

  • Logic Changes (Windows CA support)

Plugin Feed: 202507101741

Version 1.4

Jun 23, 2025, 9:47 PM

  • Logic Changes

Plugin Feed: 202506232147

Version 1.1

Feb 26, 2025, 9:18 PM

  • New

Plugin Feed: 202502262118

* Changelogs are generally available for changes made after Nov 1, 2022