CVE-2017-7969

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack.

• CWE-352

• http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/Mitigation, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/99913Third Party Advisory, VDB Entry
• https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhereIssue Tracking, Mitigation, Patch, Vendor Advisory
• http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/Mitigation, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/99913Third Party Advisory, VDB Entry
• https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhereIssue Tracking, Mitigation, Patch, Vendor Advisory

Published

Sep 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7963The GNU Multiple Precision Arithmetic Library (GMP) interfac…
• CVE-2017-7964Zyxel WRE6505 devices have a default TELNET password of 1234…
• CVE-2017-7965A buffer overflow vulnerability exists in Programming Softwa…7.3
• CVE-2017-7966A DLL Hijacking vulnerability in the programming software in…
• CVE-2017-7967All versions of VAMPSET software produced by Schneider Elect…
• CVE-2017-7968An Incorrect Default Permissions issue was discovered in Sch…
• CVE-2017-7970A vulnerability exists in Schneider Electric's PowerSCADA An…
• CVE-2017-7971A vulnerability exists in Schneider Electric's PowerSCADA An…
• CVE-2017-7972A vulnerability exists in Schneider Electric's PowerSCADA An…
• CVE-2017-7973A SQL injection vulnerability exists in Schneider Electric's…
• CVE-2017-7974A path traversal information disclosure vulnerability exists…
• CVE-2017-7975Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of…