CVE-2011-3144

MEDIO 4.3CVE-2011-3144 · Published 16/08/2011 · updated 16/06/2026

En resumen

CVE-2011-3144 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a clearscada (aveva), scx 67 (schneider-electric), scx 68 (schneider-electric).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.5%, mayor que el 84.8% de las vulnerabilidades.
Solución: actualizar a r4.5, r3.9 o posterior.

Package	Affected versions	Patched versions
clearscada aveva	`= 2005= 2007= 2009`	No fix yet
scx 67 schneider-electric	`< r4.5`	`r4.5`
scx 68 schneider-electric	`< r3.9`	`r3.9`

Description

Cross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

secunia.com/advisories/44955 · Third Party Advisory
digitalbond.com/scadapedia/vulnerability-notes/control-microsystems-cross-site-scripting-vulnerability · Third Party Advisory
osvdb.org/72987 · Broken Link
us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdf · Patch
us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdf · Patch

Más vulnerabilidades de clearscada

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

En resumen

CVE-2011-3144 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a clearscada (aveva), scx 67 (schneider-electric), scx 68 (schneider-electric).

Probabilidad de explotación en los próximos 30 días (EPSS): 2.5%, mayor que el 84.8% de las vulnerabilidades.

Solución: actualizar a r4.5, r3.9 o posterior.

Package

Affected versions

Patched versions

clearscada

aveva

= 2005= 2007= 2009

No fix yet

scx 67

schneider-electric

< r4.5

r4.5

scx 68

schneider-electric

< r3.9

r3.9

Más vulnerabilidades de clearscada

Ver todo →