Lucene search

[email protected]NVD:CVE-2011-4034

HistoryDec 02, 2011 - 11:55 a.m.

CVE-2011-4034

2011-12-0211:55:05

CWE-119

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

JSON

Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Affected configurations

NVD

Node

schneider-electricvijeo_historianRange≤4.30

schneider-electricvijeo_historianMatch4.0

schneider-electricvijeo_historianMatch4.10

schneider-electricvijeo_historianMatch4.20

Node

schneider-electriccitecthistorianRange≤4.30

schneider-electriccitecthistorianMatch4.20

Node

schneider-electriccitectscada_reportsRange≤4.10

schneider-electriccitectscada_reportsMatch4.0

References

www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695

www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page

www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

JSON

Related for NVD:CVE-2011-4034

checkpoint_advisories1 prion1 cvelist1 cve1 ics1