CVE-2019-13537: Aveva IEC870IP Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.

Affected products

• Aveva IEC870IP Firmware: up to and including 4.14.02

Published 2020-01-14. Last modified 2026-06-17.