high7.5
CVE-2019-13537
The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could res…
Impact
The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aveva | Iec870ip Firmware | through 4.14.02 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec139.pdf
- https://www.us-cert.gov/ics/advisories/icsa-19-290-01
- https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec139.pdf
- https://www.us-cert.gov/ics/advisories/icsa-19-290-01