CVE-2013-2824

highPriorität · verfolgen · 32EPSS 0.018 · 78. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.79% (78th) EPSS

CVSS 7.8 · high

Is it mine?

24 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to cause a denial of service via a crafted packet.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationCitectSCADAcisa_csaf_ot
Some customers may have experienced a crash after applying the “security & quality fix” released on December 16, 2013. Schneider Electric has determined that the problem is within the quality portion of the fix. They have removed the quality fix from the release and have issued a new patch containing only the security update for this vulnerability.
MitigationPowerLogic SCADAcisa_csaf_ot
Some customers may have experienced a crash after applying the “security & quality fix” released on December 16, 2013. Schneider Electric has determined that the problem is within the quality portion of the fix. They have removed the quality fix from the release and have issued a new patch containing only the security update for this vulnerability.
MitigationStruxureWare PowerSCADA Expertcisa_csaf_ot
Some customers may have experienced a crash after applying the “security & quality fix” released on December 16, 2013. Schneider Electric has determined that the problem is within the quality portion of the fix. They have removed the quality fix from the release and have issued a new patch containing only the security update for this vulnerability.
MitigationStruxureWare SCADA Expert Vijeo Citectcisa_csaf_ot
Some customers may have experienced a crash after applying the “security & quality fix” released on December 16, 2013. Schneider Electric has determined that the problem is within the quality portion of the fix. They have removed the quality fix from the release and have issued a new patch containing only the security update for this vulnerability.
MitigationVijeo Citectcisa_csaf_ot
Some customers may have experienced a crash after applying the “security & quality fix” released on December 16, 2013. Schneider Electric has determined that the problem is within the quality portion of the fix. They have removed the quality fix from the release and have issued a new patch containing only the security update for this vulnerability.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–7.8

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.9

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Csecondary · CISA US

v2.06.6mediumAV:N/AC:L/Au:N/C:N/I:N/A:C/E:Usecondary · CVSS-BT (t0sche)

v3.16.5mediumAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-248USCWE-391US

betroffene Produkte (24)

Betroffene Produkte und Versionsbereiche.

Schneider Electric CitectSCADA: >=v7.20|<v7.30SP1alle Versionencisa_csaf_otUS
Schneider Electric PowerLogic SCADA: >=v7.20|<v7.20SR1alle Versionencisa_csaf_otUS
Schneider Electric StruxureWare PowerSCADA Expert: >=v7.30|<v7.30SR1alle Versionencisa_csaf_otUS
Schneider Electric StruxureWare SCADA Expert Vijeo Citect: v7.40alle Versionencisa_csaf_otUS
Schneider Electric Vijeo Citect: >=v7.20|<v7.30SP1alle Versionencisa_csaf_otUS
Schneider Electric CitectSCADAv7.20| → v7.30SP1cisa_csaf_otUS
Schneider Electric PowerLogic SCADAv7.20| → v7.20SR1cisa_csaf_otUS
Schneider Electric StruxureWare PowerSCADA Expertv7.30| → v7.30SR1cisa_csaf_otUS
Schneider Electric StruxureWare SCADA Expert Vijeo Citectalle Versionencisa_csaf_otUS
Schneider Electric Vijeo Citectv7.20| → v7.30SP1cisa_csaf_otUS
n/a n/a≤ n/aenisa_euvdEU
Schneider Electric Citect SCADA≤ 7.30SP1fstec_bduRU
Schneider Electric Citect SCADA≤ 7.20fstec_bduRU
Schneider Electric PowerLogic SCADA7.20 → 7.20SR1fstec_bduRU
Schneider Electric StruxureWare PowerSCADA Expert7.30 → 7.30SR1fstec_bduRU
Schneider Electric StruxureWare SCADA Expert Vijeo Citect≤ 7.40fstec_bduRU
Schneider Electric Vijeo Citect7.20 → 7.30SP1fstec_bduRU
schneider-electric citectscada= 7.20nvdUScpe:2.3:a:schneider-electric:citectscada:*:*:*:*:*:*:*:*
schneider-electric citectscada= 7.30nvdUScpe:2.3:a:schneider-electric:citectscada:*:*:*:*:*:*:*:*
schneider-electric powerlogic scada= 7.20nvdUScpe:2.3:a:schneider-electric:powerlogic_scada:*:*:*:*:*:*:*:*

20 von 24 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-13-350-01ASchneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A)2013-09-18icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot nvd NVD CVE.org MITRE

veröffentlicht 2014-02-26geändert 2026-06-16

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan