CVEvulnerability
CVE-2011-3330
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-11-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.
Affected configurations
• schneider-electric monitor pro (<= 7.6)
• schneider-electric opc factory server (<= 3.34)
• schneider-electric pl7 pro (<= 4.5)
• schneider-electric telemecanique driver pack (<= 2.6)
• schneider-electric unity pro (<= 6.0)
• schneider-electric vijeo citect (<= 7.20)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/46534 Vendor Advisory
- http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page Vendor Advisory
- http://www.securityfocus.com/bid/50319 www.securityfocus.com
- http://www.securitytracker.com/id?1026234 www.securitytracker.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-277-01.pdf US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70882 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/46534 Vendor Advisory
- http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page Vendor Advisory
- http://www.securityfocus.com/bid/50319 www.securityfocus.com
- http://www.securitytracker.com/id?1026234 www.securitytracker.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-277-01.pdf US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70882 exchange.xforce.ibmcloud.com