Unscored CVE-2011-4036 EUVD-2011-3988GHSA-72r8-82w3-5mc6

Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADA…

Published Dec 2, 2011 · Updated Sep 16, 2024 · Assigned by certcc

Description

Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

Advisories 1

ICSA-11-307-01 Schneider Electric Vijeo Historian Web Server Multiple Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025

References

http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page
http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf
http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695