CVE-2008-2639: Citect Citectfacilities

High severity, CVSS 7.6. EPSS: 77.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222.

Affected products

• Citect Citectfacilities: version 7 only
• Citect Citectscada: version 6 only; version 7 only

Published 2008-06-16. Last modified 2026-06-16.