Vulnerabilities > CVE-2019-13537 - Out-of-bounds Write vulnerability in Aveva Iec870Ip Firmware 4.14.02

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
aveva
CWE-787

Summary

The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.

Vulnerable Configurations

Part Description Count
OS
Aveva
1
Hardware
Aveva
1

Common Weakness Enumeration (CWE)