CVE-2011-5163: Mitsubishi-Automation MX4 Scada

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX4 SCADA before 7.20 allows local users to execute arbitrary code via a long string in a login sequence.

Affected products

• Mitsubishi-Automation MX4 Scada: up to and including 7.10
• Schneider Electric Citectscada: up to and including 7.10

Published 2012-09-15. Last modified 2026-06-16.