CVE-2019-10981

State: Published
Severity: Not scored
Published: May 31, 2019
Updated: Aug 4, 2024
Reserved: Apr 8, 2019

Description

In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials.

Scores

The record has no CVSS score.

Weaknesses

CWE-522 Insufficiently Protected Credentials CWE-522

Affected Products

Product	Versions
AVEVA Vijeo Citect and CitectSCADAAVEVA	Vijeo Citect 7.30 and 7.40 CitectSCADA 7.30 and 7.40Affected

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-150-01
https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityAdvisory_LFSec136.pdf
108543vdb-entry
https://security.cse.iitk.ac.in/responsible-disclosure

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.