Lucene search
K

Vijeo Citect, CitectSCADA, and PowerLogic SCADA systems are vulnerable to data collection and industrial automation process control. This vulnerability stems from deficiencies in access control for certain functions, allowing attackers to read arbitrary files, send HTTP requests, or cause service interruptions.

🗓️ 29 Oct 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 1 Views

Access control flaws in Vijeo Citect and CitectSCADA enable reading files or disruption via XML.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CVE
CVE-2013-2796
9 Aug 201323:00
cve
Cvelist
CVE-2013-2796
9 Aug 201323:00
cvelist
EUVD
EUVD-2013-2735
7 Oct 202500:30
euvd
ICS
Schneider Electric Vijeo Citect, CitectSCADA, PowerLogic SCADA Vulnerability
8 May 201306:00
ics
NVD
CVE-2013-2796
9 Aug 201323:55
nvd
Prion
Xxe
9 Aug 201323:55
prion
RedhatCVE
CVE-2013-2796
22 May 202508:59
redhatcve

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Oct 2019 00:00Current
5.7Medium risk
Vulners AI Score5.7
CVSS 26.9
CVSS 38.4
EPSS0.00149
1