CVE-2013-3075

highPriorität · beachten · 54EPSS 0.108 · 96. PerzentilExploit · funktionalEURUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
1 exploit · funktional
Likely / severe?
10.8% (96th) EPSS
CVSS 10 · high
Is it mine?
12 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow remote attackers to execute arbitrary code via a long string, as demonstrated by a long WzTitle property value to a certain ActiveX control.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

  • MitigationAutomation MX Componentcisa_csaf_ot

    CitectFacilities and CitectSCADA only distributed a trial version of Mitsubishi MX Component Version 3 as complimentary software, which is not installed by default. It is not licensed by Schneider Electric. Schneider Electric has released a security notification Important security notification - possible vulnerability within Mitsubishi MX Component Version 3 distributed by CitectFacilities, (http://www.citect.schneider-electric.com/security-mitsubishi), Web site last accessed May 20, 2013. for CitectFacilities and CitectSCADA products that distributed a complimentary trial version of Mitsubishi MX Component Version 3.

    http://www.citect.schneider-electric.com/security-mitsubishi
  • MitigationCitectFacilitiescisa_csaf_ot

    CitectFacilities and CitectSCADA only distributed a trial version of Mitsubishi MX Component Version 3 as complimentary software, which is not installed by default. It is not licensed by Schneider Electric. Schneider Electric has released a security notification Important security notification - possible vulnerability within Mitsubishi MX Component Version 3 distributed by CitectFacilities, (http://www.citect.schneider-electric.com/security-mitsubishi), Web site last accessed May 20, 2013. for CitectFacilities and CitectSCADA products that distributed a complimentary trial version of Mitsubishi MX Component Version 3.

    http://www.citect.schneider-electric.com/security-mitsubishi
  • MitigationCitectSCADAcisa_csaf_ot

    CitectFacilities and CitectSCADA only distributed a trial version of Mitsubishi MX Component Version 3 as complimentary software, which is not installed by default. It is not licensed by Schneider Electric. Schneider Electric has released a security notification Important security notification - possible vulnerability within Mitsubishi MX Component Version 3 distributed by CitectFacilities, (http://www.citect.schneider-electric.com/security-mitsubishi), Web site last accessed May 20, 2013. for CitectFacilities and CitectSCADA products that distributed a complimentary trial version of Mitsubishi MX Component Version 3.

    http://www.citect.schneider-electric.com/security-mitsubishi
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

10.0
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.8–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 10
v2.09.3criticalAV:N/AC:M/Au:N/C:C/I:C/A:Csecondary · CISA US
v2.09highAV:N/AC:L/Au:N/C:C/I:C/A:C/E:POCsecondary · CVSS-BT (t0sche)
v3.18.8highAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-119USprimärCWE-119USCWE-122US
04

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

05

betroffene Produkte (12)

Betroffene Produkte und Versionsbereiche.

06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-13-140-01Mitsubishi Electric Automation MX Component V3 ActiveX Vulnerability2013-02-21icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

07

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otnvdNVDCVE.orgMITRE
veröffentlicht 2013-04-19geändert 2026-06-16
10

Referenzen (3)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan