CVE-2013-2824
High
Description
Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to cause a denial of service via a crafted packet.
SeverityHigh
CVSS7.8
Exploit probability—
ProductSchneider-electric Citectscada
PublishedFeb 26, 2014
First seenFeb 26, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric citectscada | 7.20, 7.30 | — |
| schneider-electric powerlogic_scada | 7.20 | — |
| schneider-electric struxureware_powerscada_expert | 7.30 | — |
| schneider-electric struxureware_scada_expert_vijeo_citect | 7.20, 7.30, 7.40 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.