Lucene search
CertccCVE-2011-4034HistoryDec 02, 2011 - 11:55 a.m.
CVE-2011-4034
2011-12-0211:55:05
CWE-119
certcc
web.nvd.nist.gov
26
cve-2011-4034
buffer overflow
steema teechart activex
remote code execution
denial of service
schneider electric
vijeo historian
citecthistorian
citectscadareports
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
8.3
Confidence
High
EPSS
0.38
Percentile
97.3%
Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
Affected configurations
Node
schneider-electricvijeo_historianRange≤4.30
ORschneider-electricvijeo_historianMatch4.0
ORschneider-electricvijeo_historianMatch4.10
ORschneider-electricvijeo_historianMatch4.20
Node
schneider-electriccitecthistorianRange≤4.30
ORschneider-electriccitecthistorianMatch4.20
Node
schneider-electriccitectscada_reportsRange≤4.10
ORschneider-electriccitectscada_reportsMatch4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | vijeo_historian | * | cpe:2.3:a:schneider-electric:vijeo_historian:*:*:*:*:*:*:*:* |
| schneider-electric | vijeo_historian | 4.0 | cpe:2.3:a:schneider-electric:vijeo_historian:4.0:*:*:*:*:*:*:* |
| schneider-electric | vijeo_historian | 4.10 | cpe:2.3:a:schneider-electric:vijeo_historian:4.10:*:*:*:*:*:*:* |
| schneider-electric | vijeo_historian | 4.20 | cpe:2.3:a:schneider-electric:vijeo_historian:4.20:*:*:*:*:*:*:* |
| schneider-electric | citecthistorian | * | cpe:2.3:a:schneider-electric:citecthistorian:*:*:*:*:*:*:*:* |
| schneider-electric | citecthistorian | 4.20 | cpe:2.3:a:schneider-electric:citecthistorian:4.20:*:*:*:*:*:*:* |
| schneider-electric | citectscada_reports | * | cpe:2.3:a:schneider-electric:citectscada_reports:*:*:*:*:*:*:*:* |
| schneider-electric | citectscada_reports | 4.0 | cpe:2.3:a:schneider-electric:citectscada_reports:4.0:*:*:*:*:*:*:* |
Related
prion
prion
Buffer overflow
2011-12-02 11:55:00
cvelist
cvelist
CVE-2011-4034
2011-12-02 11:00:00
nvd
nvd
CVE-2011-4034
2011-12-02 11:55:05
checkpoint_advisories
checkpoint_advisories
Steema TeeChart ActiveX Control Buffer Overflow (CVE-2011-4034)
2015-08-20 00:00:00
ics
ics
Schneider Electric Vijeo Historian Web Server Multiple Vulnerabilities
2013-05-07 12:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
8.3
Confidence
High
EPSS
0.38
Percentile
97.3%
Related for CVE-2011-4034