PT-2011-4820 · Steema+1 · Steema Teechart Activex Control+3

Published 2011-12-02 · Updated 2011-12-02 · CVE-2011-4033

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Steema TeeChart ActiveX control as used in Schneider Electric Vijeo Historian versions 4.30 and earlier Steema TeeChart ActiveX control as used in CitectHistorian versions 4.30 and earlier Steema TeeChart ActiveX control as used in CitectSCADAReports versions 4.10 and earlier

Description The issue is a buffer overflow in the Steema TeeChart ActiveX control. This control is used in various software products, including Schneider Electric Vijeo Historian, CitectHistorian, and CitectSCADAReports. The buffer overflow can be exploited by remote attackers to cause a denial of service via unspecified vectors.

Recommendations For Schneider Electric Vijeo Historian versions 4.30 and earlier, update to a version later than 4.30 to resolve the issue. For CitectHistorian versions 4.30 and earlier, update to a version later than 4.30 to resolve the issue. For CitectSCADAReports versions 4.10 and earlier, update to a version later than 4.10 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-4033

Affected Products

Citecthistorian

Citectscadareports

Steema Teechart Activex Control

Vijeo Historian

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-4033 · Security Note
• http://us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf · Note
• http://scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page · Note
• http://citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695 · Note