Unscored severity · published Nov 4, 2011
CVE-2011-3330
Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier,…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MP
Monitor Pro · Schneider-electric
through 7.6 · source: NVD
OF
Opc Factory Server · Schneider-electric
through 3.34 · source: NVD
PP
Pl7 Pro · Schneider-electric
through 4.5 · source: NVD
TD
Telemecanique Driver Pack · Schneider-electric
through 2.6 · source: NVD
UP
Unity Pro · Schneider-electric
through 6.0 · source: NVD
VC
Vijeo Citect · Schneider-electric
through 7.20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3330
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3330
Vendor Advisory
http://secunia.com/advisories/46534
Vendor Advisory
http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page
www.securityfocus.com
http://www.securityfocus.com/bid/50319
www.securitytracker.com
http://www.securitytracker.com/id?1026234
US Government Resource
http://www.us-cert.gov/control_systems/pdf/ICSA-11-277-01.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/70882