CVE-2017-9963

A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 for multiple state-changing requests. This type of attack requires some level of social engineering in order to get a legitimate user to click on or access a malicious link/site containing the CSRF attack.

• CWE-352

• http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/Broken Link
• https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywherePermissions Required, Vendor Advisory
• http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/Broken Link
• https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywherePermissions Required, Vendor Advisory

Published

Feb 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9957A vulnerability exists in Schneider Electric's U.motion Buil…
• CVE-2017-9958An improper access control vulnerability exists in Schneider…
• CVE-2017-9959A vulnerability exists in Schneider Electric's U.motion Buil…
• CVE-2017-9960An information disclosure vulnerability exists in Schneider …
• CVE-2017-9961A vulnerability exists in Schneider Electric's Pro-Face GP P…
• CVE-2017-9962Schneider Electric's ClearSCADA versions released prior to A…
• CVE-2017-9964A Path Traversal issue was discovered in Schneider Electric …
• CVE-2017-9965An exposure of sensitive information vulnerability exists in…
• CVE-2017-9966A privilege escalation vulnerability exists in Schneider Ele…
• CVE-2017-9967A security misconfiguration vulnerability exists in Schneide…
• CVE-2017-9968A security misconfiguration vulnerability exists in Schneide…
• CVE-2017-9969An information disclosure vulnerability exists in Schneider …