← Vulnerability feed

Vulnerability record · CVE-2011-3330 · published 4 November 2011

CVE-2011-3330: Schneider-electric monitor pro memory buffer overflow vulnerability

Schneider Electric · Monitor Pro

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.

7.2 CVSS 2.0 High EPSS 1.3% · top 30.7% CWE-119 · Memory buffer overflow
7.2CVSS 2.0 base score
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
6Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

6 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/46534 Vendor Advisory
http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page Vendor Advisory
http://www.securityfocus.com/bid/50319
http://www.securitytracker.com/id?1026234
http://www.us-cert.gov/control_systems/pdf/ICSA-11-277-01.pdf US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/70882
http://secunia.com/advisories/46534 Vendor Advisory
http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page Vendor Advisory
http://www.securityfocus.com/bid/50319
http://www.securitytracker.com/id?1026234
http://www.us-cert.gov/control_systems/pdf/ICSA-11-277-01.pdf US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/70882

Track CVE-2011-3330 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-7475Schneider-electric ecostruxure control expert injection vulnerabilityA CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in…EPSS 1.6%9.3CVE-2013-0662Schneider-electric concept out-of-bounds write vulnerabilityMultiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute …EPSS 22%8.6CVE-2020-7560Schneider-electric ecostruxure control expert vulnerabilityA CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ C…EPSS 1.4%7.5CVE-2014-9200Schneider-electric somachine stack-based buffer overflow vulnerabilityStack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modb…EPSS 5.6%7.3CVE-2019-6855Schneider-electric ecostruxure control expert incorrect authorization vulnerabilityIncorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M3…EPSS 0.96%7.3CVE-2015-1014Schneider-electric opc factory server uncontrolled search path element vulnerabilityA successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider…EPSS 0.46%7.0CVE-2016-8354Schneider-electric unity pro code injection vulnerabilityAn issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Si…EPSS 1.1%6.8CVE-2014-0774Schneider-electric ofs test client tlxcdlfofs33 stack-based buffer overflow vulnerabilityStack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLU…EPSS 0.47%

Source: NIST National Vulnerability Database (record CVE-2011-3330), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.