CVE:CVE-2014-5411
CNNVD:CNNVD-201409-656
Schneider Electric StruxureWare SCADA Expert ClearSCADA是法国施耐德电气（Schneider Electric）公司的一套能效管理软件监控平台。该平台主要用于远程管理关键基础设施。
Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3至2014 R1版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade aveva clearscada to a higher version than 2010:r3,2010:r3.1,2013:r1,2013:r1.1,2013:r1.1a,2013:r1.2,2013:r2,and avoid the version 2010:r3,2010:r3.1,2013:r1,2013:r1.1,2013:r1.1a,2013:r1.2,2013:r2; Upgrade schneider-electric scada_expert_clearscada to a higher version than 2013:r2.1,2014:r1,and avoid the version 2013:r2.1,2014:r1