CVE-2017-7971

6.5
MEDIUMCVSS v3.1 Base Score
0.78%
LOW RiskEPSS (55th percentile)

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the use of outdated cipher suites and improper verification of peer SSL Certificate.

Published: 9/26/2017
Modified: 6/17/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

6.5MEDIUM

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2 Score

4

AV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS Score (Exploitation Probability)

0.78%LOW Exploitation Risk
55th percentile

This vulnerability has a 0.78% probability of being exploited in the next 30 days, ranking higher than 55% of all scored CVEs.

CWE Classification

Advertisement