CVE-2019-13537: Buffer Overflow
Published Jan 14, 2020
·Updated
The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.
Affected Software
2 affected components
AVEVA Iec870ip Firmware<=4.14.02
AVEVA IEC870IP
Event History
Jan 14, 2020
CVE Published
via MITRE·06:05 PM
Data Sourced
via MITRE·06:05 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-13537.
2
What software is affected by this vulnerability?
The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation is affected by this vulnerability.
3
What is the severity of CVE-2019-13537?
The severity of CVE-2019-13537 is 7.5 (high).
4
How can this vulnerability be exploited?
This vulnerability can be exploited by causing a buffer overflow, which could result in a server-side crash.
5
Are there any available patches or fixes for this vulnerability?
No patches or fixes are mentioned in the available references, so it is advisable to follow the recommendations provided by AVEVA and Schneider Electric in their security bulletins.