CVE-2011-3143 Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of servi...
HighCVSS 10.0
EPSS 7.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified long strings that trigger heap memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| AVEVA clearscada | = 2005 | No fix listed |
| AVEVA clearscada | = 2007 | No fix listed |
| AVEVA clearscada | = 2009 | No fix listed |
| schneider-electric scx 67 | < r4.5 | r4.5 |
| schneider-electric scx 68 | < r3.9 | r3.9 |
References
- 44955 third-party-advisory
- www.digitalbond.com broken-link third-party-advisory
- 72989 broken-link vdb-entry
- 46312 third-party-advisory vdb-entry
- www.us-cert.gov patch third-party-advisory us-government-resource
- www.us-cert.gov patch third-party-advisory us-government-resource