CVE-2011-5163

MEDIO 4.6CVE-2011-5163 · Published 15/09/2012 · updated 16/06/2026

En resumen

CVE-2011-5163 es una vulnerabilidad MEDIO (CVSS 4.6) que afecta a mx4 scada (mitsubishi-automation), citectscada (schneider-electric).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.47%, mayor que el 40.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
mx4 scada mitsubishi-automation	`≤ 7.10`	No fix yet
citectscada schneider-electric	`≤ 7.10`	No fix yet

Description

Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX4 SCADA before 7.20 allows local users to execute arbitrary code via a long string in a login sequence.

References

secunia.com/advisories/46779 · Vendor Advisory
secunia.com/advisories/46786 · Vendor Advisory
citect.com/citectscada-batch
osvdb.org/76937
securitytracker.com/id
us-cert.gov/control_systems/pdf/ICSA-11-279-02.pdf · US Government Resource
my.mitsubishi-automation.com/downloads_show.php

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free