What’s Vulnerable › Vulnerabilities

CVE-2011-3330

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-11-04 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.

Affected products

• Schneider-Electric Monitor Pro: through 7.6
• Schneider Electric OPC Factory Server (OFS): through 3.34
• Schneider-Electric Pl7 Pro: through 4.5
• Schneider-Electric Telemecanique Driver Pack: through 2.6
• Schneider Electric Unity Pro: through 6.0
• Schneider-Electric Vijeo Citect: through 7.20

References

• http://secunia.com/advisories/46534
• http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page
• http://www.securityfocus.com/bid/50319
• http://www.securitytracker.com/id?1026234
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-277-01.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70882
• http://secunia.com/advisories/46534
• http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page
• http://www.securityfocus.com/bid/50319
• http://www.securitytracker.com/id?1026234
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-277-01.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70882

Get alerted when CVE-2011-3330 or the next vulnerability affects your stack