Unscored severity · published Aug 9, 2013
CVE-2013-2796
Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Citectscada · Schneider-electric
through 7.20; 7.10 · source: NVD
PS
Powerlogic Scada · Schneider-electric
through 7.20; 7.10 · source: NVD
VC
Vijeo Citect · Schneider-electric
through 7.20; 7.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2796
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2796
US Government Resource
http://ics-cert.us-cert.gov/advisories/ICSA-13-217-02
Patch
http://www.citect.schneider-electric.com/cs-HF720SP459363
More from Citectscada
7.8
CVE-2019-10981
In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials
–
CVE-2013-2824
Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through…
–
CVE-2013-3075
Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow remote attackers to…
–
CVE-2011-5163
Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX4 SCADA before 7.20 allows local users…