High severity7.5NVD Advisory· Published Jan 14, 2020· Updated Jun 17, 2026

CVE-2019-13537

Description

The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aveva/Vijeo Citectllm-create
Aveva/Citect SCADAllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: IEC870IP driver v4.14.02 and prior
Schneider Electric/Power SCADA Operationllm-fuzzy
Aveva/Iec870ip Firmware
cpe:2.3:o:aveva:iec870ip_firmware:*:*:*:*:*:*:*:*
Range: <=4.14.02

Patches

Vulnerability mechanics

References

sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec139.pdfnvdVendor Advisory
www.us-cert.gov/ics/advisories/icsa-19-290-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000