Schneider Electric Citectscada vulnerabilities

5 CVEs affecting Schneider Electric Citectscada, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10981, published 2019-05-31.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-3075, published 2013-04-19. High severity, CVSS 10.0. EPSS: 10.8% chance of exploitation in the next 30 days. Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow remote attackers to execute arbitrary code…
• CVE-2013-2824, published 2014-02-26. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and…
• CVE-2013-2796, published 2013-08-09. Medium severity, CVSS 6.9. EPSS: 0.7% chance of exploitation in the next 30 days. Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet…
• CVE-2011-5163, published 2012-09-15. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX4 SCADA before 7.20 allows local users to execute arbitrary…
• CVE-2019-10981, published 2019-05-31. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials.