Unscored CVE-2019-13537 EUVD-2019-4992GHSA-hpw3-432w-cv6v

The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerab…

Published Jan 14, 2020 · Updated Aug 4, 2024 · Assigned by icscert

Vendor: AVEVA Product: Vijeo Citect and Citect SCADA

Description

The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.

Affected products

Vendor	Product	Affected	Fixed
AVEVA	Vijeo Citect and Citect SCADA	IEC870IP driver v4.14.02 and prior	—

Advisories 1

ICSA-19-290-01 AVEVA Vijeo Citect and Citect SCADA (Update A) CISA ICS & IT advisories · Dec 19, 2019

References

https://www.us-cert.gov/ics/advisories/icsa-19-290-01
https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec139.pdf