AVEVA Vijeo Citect and CitectSCADA
Advisory ansehen veröffentlicht 2019-05-30
Successful exploitation of this vulnerability could allow a locally authenticated user to obtain Citect user credentials.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-10981US | high7.8 | — | ||
In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-19-150-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenCitectSCADA
AVEVA recommends all affected users download and upgrade to CitectSCADA 2018 as soon as possible.
https://softwaresupportsp.schneider-electric.com/#/producthub/details?id=51141 - BehobenVijeo Citect
AVEVA recommends all affected users download and upgrade to CitectSCADA 2018 as soon as possible.
https://softwaresupportsp.schneider-electric.com/#/producthub/details?id=51141
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan