CVE-2011-3330
highPriorität · verfolgen · 29EPSS 0.013 · 70. PerzentilEUUSEPSS · bewertet 2026-10-27
Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationMonitor Pro Windows XPcisa_csaf_ot
Schneider Electric recommends that users requiring additional assistance contact their global support center or a local customer service center. Contact information is available at the following web addresses.
- MitigationOPC Factory Server Windows XPcisa_csaf_ot
Schneider Electric recommends that users requiring additional assistance contact their global support center or a local customer service center. Contact information is available at the following web addresses.
- MitigationPL7 Pro Windows XPcisa_csaf_ot
Schneider Electric recommends that users requiring additional assistance contact their global support center or a local customer service center. Contact information is available at the following web addresses.
- MitigationTelemecanique Driver Pack Windows XPcisa_csaf_ot
Schneider Electric recommends that users requiring additional assistance contact their global support center or a local customer service center. Contact information is available at the following web addresses.
- MitigationUnity Pro Windows XPcisa_csaf_ot
Schneider Electric recommends that users requiring additional assistance contact their global support center or a local customer service center. Contact information is available at the following web addresses.
- MitigationVijeo Citect Windows XPcisa_csaf_ot
Schneider Electric recommends that users requiring additional assistance contact their global support center or a local customer service center. Contact information is available at the following web addresses.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.1–7.2
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (19)
Betroffene Produkte und Versionsbereiche.
- schneider-electric opc factory server≤ 3.34nvdUScpe:2.3:a:schneider-electric:opc_factory_server:*:*:*:*:*:*:*:*
- schneider-electric telemecanique driver pack≤ 2.6nvdUScpe:2.3:a:schneider-electric:telemecanique_driver_pack:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-11-277-01Schneider Electric UnitelWay Buffer Overflow2011-07-07icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (18)
Externe Belege — Patches, Meldungen, Analysen.
- http://secunia.com/advisories/46534cnnvd
- http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.pagecnnvd
- http://www.securityfocus.com/bid/50319cnnvd
- http://www.securitytracker.com/id?1026234cnnvd
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-277-01.pdfcnnvd
- http://xforce.iss.net/xforce/xfdb/70882cnnvd
- http://secunia.com/advisories/46534enisa_euvd
- http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.pageenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan