Approved changes feed: RSS · Atom

cpe:2.3:a:schneider-electric:vijeo_citect:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductVijeo Citect (23a67f84-ae95-5dcf-a97d-89bd6fd10bfa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2796 vulnerable 2026-06-08 05:04:27.986380 Details available
Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2013-08-09T23:00:00.000Z
Updated: 2024-09-16T18:13:41.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3330 vulnerable 2026-06-08 04:59:24.664540 Details available
Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.
Published: 2011-11-04T21:00:00.000Z
Updated: 2024-08-06T23:29:56.772Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.