AVEVA Vijeo Citect and CitectSCADA
view advisory published 2019-05-30
Successful exploitation of this vulnerability could allow a locally authenticated user to obtain Citect user credentials.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10981US | high7.8 | — | ||
In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials. | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-19-150-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedCitectSCADA
AVEVA recommends all affected users download and upgrade to CitectSCADA 2018 as soon as possible.
https://softwaresupportsp.schneider-electric.com/#/producthub/details?id=51141 - FixedVijeo Citect
AVEVA recommends all affected users download and upgrade to CitectSCADA 2018 as soon as possible.
https://softwaresupportsp.schneider-electric.com/#/producthub/details?id=51141
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan