Research Advisory - Vulnerable Disclosure 8

Submitted by user123 on Fri, 07/23/2021 - 17:10
Product
Aveva Vijeo Citect & Schneider Citect
Part No.
Version - 7.40
Make
Aveva
Vulnerability
Credentials Leaking in Memory Dump.
Disclosure Timeline
22/Apr/2019 - Security researcher of the Aveva asked about
the Vulnerability
24/Apr/2019 - C3i Provided the POC & Vulnerability report.
1/June/2019 - C3iAdvisory acknowledged to Aveva and closed this case with
the CVE number and ICSA number is ICSA-19-150-01
Status
Confirmed
Case Number
LFSec00000136
CVE Number
CVE-2019-10981
Date