CVEvulnerability
CVE-2011-4034
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-12-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
Affected configurations
• schneider-electric vijeo historian (<= 4.30)
• schneider-electric vijeo historian 4.0
• schneider-electric vijeo historian 4.10
• schneider-electric vijeo historian 4.20
• schneider-electric citecthistorian (<= 4.30)
• schneider-electric citecthistorian 4.20
• schneider-electric citectscada reports (<= 4.10)
• schneider-electric citectscada reports 4.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695 Patch, Vendor Advisory
- http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page Patch, Vendor Advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf Patch, US Government Resource
- http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695 Patch, Vendor Advisory
- http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page Patch, Vendor Advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf Patch, US Government Resource