KLA10109 ACE vulnerability in CitectSCADA

Detect date:

06/16/2008

Severity:

High

Description:

A buffer overflow was found in Citect products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed TCP packet.

Affected products:

CitectSCADA versions 6 and 7
CitectFacilities version 7

Solution:

Update to latest version

Impacts:

ACE

Related products:

CitectSCADA

CVE-IDS:

CVE-2008-26397.6High

Exploitation:

Public exploits exist for this vulnerability.