Schneider Electric Vijeo Citect vulnerabilities

2 CVEs affecting Schneider Electric Vijeo Citect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2796, published 2013-08-09.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-3330, published 2011-11-04. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6…
• CVE-2013-2796, published 2013-08-09. Medium severity, CVSS 6.9. EPSS: 0.7% chance of exploitation in the next 30 days. Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet…