← Vulnerability feed

Vulnerability record · CVE-2013-2824 · published 26 February 2014

CVE-2013-2824: Schneider-electric citectscada vulnerability

Schneider Electric · Citectscada

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to cause a denial of service via a crafted packet.

7.8 CVSS 2.0 High EPSS 1.8% · top 22.6%
7.8CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to cause a denial of service via a crafted packet.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://ics-cert.us-cert.gov/advisories/ICSA-13-350-01 PatchUS Government Resource
http://www.citect.schneider-electric.com/security-DoS PatchVendor Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-13-350-01 PatchUS Government Resource
http://www.citect.schneider-electric.com/security-DoS PatchVendor Advisory

Track CVE-2013-2824 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2013-3075Mitsubishi-automation mitsubishi mx component memory buffer overflow vulnerabilityMultiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1,…EPSS 11%7.8CVE-2019-10981Schneider-electric citectscada insufficiently protected credentials vulnerabilityIn Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access t…EPSS 0.38%6.9CVE-2013-2796Schneider-electric citectscada permissions and access controls vulnerabilitySchneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read …EPSS 0.73%4.6CVE-2011-5163Mitsubishi-automation mx4 scada memory buffer overflow vulnerabilityBuffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX4 SCADA b…EPSS 0.47%

Source: NIST National Vulnerability Database (record CVE-2013-2824), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.