CVE-2011-3143: Aveva Clearscada

High severity, CVSS 10.0. EPSS: 7.5% chance of exploitation in the next 30 days.

Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified long strings that trigger heap memory corruption.

Affected products

• Aveva Clearscada: version 2005 only; version 2007 only; version 2009 only
• Schneider Electric Scx 67: before r4.5 (fixed in r4.5)
• Schneider Electric Scx 68: before r3.9 (fixed in r3.9)

Published 2011-08-16. Last modified 2026-06-16.