CVE-2019-13537

Description

The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.

Affected products

• AVEVA / Vijeo Citect and Citect SCADAIEC870IP driver v4.14.02 and prior – IEC870IP driver v4.14.02 and prior

References

• VENDOR_ADVISORYhttps://www.us-cert.gov/ics/advisories/icsa-19-290-01
• MISChttps://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec139.pdf