Unscored severity · published Feb 26, 2014
CVE-2013-2824
Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to cause a denial of service via a crafted packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Citectscada · Schneider-electric
7.20; 7.20; 7.20; 7.20; 7.20; 7.30; +1 more · source: NVD
PS
Powerlogic Scada · Schneider-electric
7.20; 7.20 · source: NVD
SP
Struxureware Powerscada Expert · Schneider-electric
7.30; 7.30 · source: NVD
SS
Struxureware Scada Expert Vijeo Citect · Schneider-electric
7.20; 7.20; 7.20; 7.20; 7.20; 7.30; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2824
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2824
Patch
http://ics-cert.us-cert.gov/advisories/ICSA-13-350-01
Patch
http://www.citect.schneider-electric.com/security-DoS
More from Citectscada
7.8
CVE-2019-10981
In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials
–
CVE-2013-2796
Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP…
–
CVE-2013-3075
Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow remote attackers to…
–
CVE-2011-5163
Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX4 SCADA before 7.20 allows local users…