{"api_version":"1","generated_at":"2026-07-23T10:11:41+00:00","cve":"CVE-2011-4034","urls":{"html":"https://cve.report/CVE-2011-4034","api":"https://cve.report/api/cve/CVE-2011-4034.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-4034","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-4034"},"summary":{"title":"CVE-2011-4034","description":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.","state":"PUBLISHED","assigner":"certcc","published_at":"2011-12-02 11:55:05","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf","name":"http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"],"title":"404 - File Not Found | CISA","mime":"application/pdf","httpstatus":"404","archivestatus":"200"},{"url":"http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695","name":"http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Vulnerability in Historian","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page","name":"http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"SCADA Global Support Extranet","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4034","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4034","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"4034","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"schneider-electric","cpe5":"citecthistorian","cpe6":"4.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4034","vulnerable":"1","versionEndIncluding":"4.30","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"schneider-electric","cpe5":"citecthistorian","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4034","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"schneider-electric","cpe5":"citectscada_reports","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4034","vulnerable":"1","versionEndIncluding":"4.10","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"schneider-electric","cpe5":"citectscada_reports","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4034","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"schneider-electric","cpe5":"vijeo_historian","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4034","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"schneider-electric","cpe5":"vijeo_historian","cpe6":"4.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4034","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"schneider-electric","cpe5":"vijeo_historian","cpe6":"4.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4034","vulnerable":"1","versionEndIncluding":"4.30","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"schneider-electric","cpe5":"vijeo_historian","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T23:53:32.633Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-12-02T11:00:00.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page"},{"tags":["x_refsource_MISC"],"url":"http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","ID":"CVE-2011-4034","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page","refsource":"CONFIRM","url":"http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page"},{"name":"http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf","refsource":"MISC","url":"http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf"},{"name":"http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695","refsource":"CONFIRM","url":"http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695"}]}}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2011-4034","datePublished":"2011-12-02T11:00:00.000Z","dateReserved":"2011-10-13T00:00:00.000Z","dateUpdated":"2024-09-16T23:16:13.957Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-12-02 11:55:05","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:vijeo_historian:*:*:*:*:*:*:*:*","versionEndIncluding":"4.30","matchCriteriaId":"FA173AD2-52AF-4401-9A29-757B68168B4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:vijeo_historian:4.0:*:*:*:*:*:*:*","matchCriteriaId":"00E3E11B-E433-4D89-9525-8159CEC30DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:vijeo_historian:4.10:*:*:*:*:*:*:*","matchCriteriaId":"2788D1E5-206A-4AC8-AA28-65E5EE268B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:vijeo_historian:4.20:*:*:*:*:*:*:*","matchCriteriaId":"99B88BED-7F2F-4F89-9BD1-B7EDC1608531"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:citecthistorian:*:*:*:*:*:*:*:*","versionEndIncluding":"4.30","matchCriteriaId":"859A64AD-1FB2-4A7C-AE4D-26951FC050F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:citecthistorian:4.20:*:*:*:*:*:*:*","matchCriteriaId":"B491E331-B533-4E09-966E-45A3BE724C5A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:citectscada_reports:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10","matchCriteriaId":"106C6198-C341-4B10-8788-A8FA51F137F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:citectscada_reports:4.0:*:*:*:*:*:*:*","matchCriteriaId":"38765B0B-9C09-4BC0-9E50-D0C6E8969A77"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"4034","Ordinal":"1","Title":"CVE-2011-4034","CVE":"CVE-2011-4034","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"4034","Ordinal":"1","NoteData":"Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.","Type":"Description","Title":"CVE-2011-4034"},{"CveYear":"2011","CveId":"4034","Ordinal":"2","NoteData":"2011-12-02","Type":"Other","Title":"Published"}]}}}