CVE-2019-10981

In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
VendorProductVersion
schneider-electriccitectscada
7.30
schneider-electriccitectscada
7.40
schneider-electricscada_expert_vijeo_citect
7.30
schneider-electricscada_expert_vijeo_citect
7.40
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/108543
https://ics-cert.us-cert.gov/advisories/ICSA-19-150-01
https://security.cse.iitk.ac.in/responsible-disclosure
https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityAdvisory_LFSec136.pdf
http://www.securityfocus.com/bid/108543
https://ics-cert.us-cert.gov/advisories/ICSA-19-150-01
https://security.cse.iitk.ac.in/responsible-disclosure
https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityAdvisory_LFSec136.pdf