Description (CNA)
The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AVEVA / Vijeo Citect and Citect SCADA | affected IEC870IP driver v4.14.02 and prior |
CWE
CWE-121
References
- https://www.us-cert.gov/ics/advisories/icsa-19-290-01
- https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec139.pdf
ADP enrichment
No English description supplied.