CVE-2011-3143: aveva clearscada Resource Management Errors

EPSS trend

Probability

7.51%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.51% on 20-09-2026

20-09-202620-10-2026

EPSS score

7.51%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

6 links

www.osvdb.org/72989VDB EntryX Refsource OSVDBBroken Link
secunia.com/advisories/44955Third Party AdvisoryX Refsource SECUNIA
www.us-cert.gov/control_systems/pdf/ICSA-10-314-01.pdfX Refsource MISCPatchThird Party AdvisoryUS Government Resource
www.us-cert.gov/control_systems/pdf/ICSA-10-314-01A.pdfX Refsource MISCPatchThird Party AdvisoryUS Government Resource
www.securityfocus.com/bid/46312VDB EntryX Refsource BIDThird Party Advisory
www.digitalbond.com/scadapedia/vulnerability-notes/heap-overflow-vulnerability/X Refsource MISCBroken LinkThird Party Advisory

Related vulnerabilities

CVE-2013-6142avevaclearscada1.16%12y ago15-01-2014 15:00DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service (resource consumption) via IP packets containing errors that trigger event-journal messages.CVE-2014-0779avevaclearscada+21.49%12y ago14-03-2014 10:00The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build 73.4903, 2013 R1.2 build 73.4955, and 2013 R2 build 74.5094 allows remote attackers to cause a denial of service (application crash) via a crafted OPF file (aka project file).CVE-2014-5413avevaclearscada+31.03%12y ago18-09-2014 10:00Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm.CVE-2014-5411avevaclearscada+31.29%12y ago18-09-2014 10:00Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.CVE-2014-5412avevaclearscada+31.57%12y ago18-09-2014 10:00Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.CVE-2011-3144avevaclearscada+22.51%15y ago16-08-2011 21:00Cross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

All vulnerabilities inclearscada scx_67 scx_68

CVE-2011-3143: aveva clearscada Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References