Vulnerability in Aveva Clearscada
CVE-2011-3143
Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified long strings that trigger heap memory corruption.
EPSS: 0.060 (92.6th percentile) — read the EPSS interpretation.
Affected products
- Aveva Clearscada — versions 2005, 2007, 2009
- Schneider-electric Scx_67
- Schneider-electric Scx_68
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (US Government Resource, Patch, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (US Government Resource, Patch, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (Third Party Advisory, x_refsource_MISC, Broken Link)