In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/108543 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-19-150-01 | Mitigation Third Party Advisory US Government Resource |
| https://security.cse.iitk.ac.in/responsible-disclosure | Third Party Advisory |
| https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityAdvisory_LFSec136.pdf | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/108543 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-19-150-01 | Mitigation Third Party Advisory US Government Resource |
| https://security.cse.iitk.ac.in/responsible-disclosure | Third Party Advisory |
| https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityAdvisory_LFSec136.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/108543 - Third Party Advisory, VDB Entry | |
| References | () https://ics-cert.us-cert.gov/advisories/ICSA-19-150-01 - Mitigation, Third Party Advisory, US Government Resource | |
| References | () https://security.cse.iitk.ac.in/responsible-disclosure - Third Party Advisory | |
| References | () https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityAdvisory_LFSec136.pdf - Patch, Vendor Advisory |
Information
Published : 2019-05-31 21:29
Updated : 2024-11-21 04:20
NVD link : CVE-2019-10981
Mitre link : CVE-2019-10981
CVE.ORG link : CVE-2019-10981
JSON object : View
Products Affected
schneider-electric
- scada_expert_vijeo_citect
- citectscada
CWE
CWE-522
Insufficiently Protected Credentials