Lucene search

[email protected]CVE-2011-4034

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4034

2022-10-0316:15:14

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-4034

buffer overflow

steema teechart activex

remote code execution

denial of service

schneider electric

vijeo historian

citecthistorian

citectscadareports

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

JSON

Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Affected configurations

NVD

Node

schneider-electricvijeo_historianRange≤4.30

schneider-electricvijeo_historianMatch4.0

schneider-electricvijeo_historianMatch4.10

schneider-electricvijeo_historianMatch4.20

Node

schneider-electriccitecthistorianRange≤4.30

schneider-electriccitecthistorianMatch4.20

Node

schneider-electriccitectscada_reportsRange≤4.10

schneider-electriccitectscada_reportsMatch4.0

CPENameOperatorVersion
schneider-electric:vijeo_historianschneider-electric vijeo historianle4.30
schneider-electric:vijeo_historianschneider-electric vijeo historianeq4.0
schneider-electric:vijeo_historianschneider-electric vijeo historianeq4.10
schneider-electric:vijeo_historianschneider-electric vijeo historianeq4.20

CPE	Name	Operator	Version
schneider-electric:vijeo_historian	schneider-electric vijeo historian	le	4.30
schneider-electric:vijeo_historian	schneider-electric vijeo historian	eq	4.0
schneider-electric:vijeo_historian	schneider-electric vijeo historian	eq	4.10
schneider-electric:vijeo_historian	schneider-electric vijeo historian	eq	4.20