ICSA-18-331-01

icsaUScisa_csaf_ot

AVEVA Vijeo Citect and Citect SCADA

view advisory published 2018-11-27

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2018-7799UShigh7.8—
A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targ…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationCitect SCADA

    AVEVA recommends following industry cybersecurity best practices

  • MitigationVijeo Citect

    AVEVA recommends following industry cybersecurity best practices

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan