CVE:CVE-2019-10981
CNNVD:CNNVD-201905-1129
Schneider Electric AVEVA Vijeo Citect和Schneider Electric AVEVA CitectSCADA都是法国施耐德电气（Schneider Electric）公司的一套数据采集与监控系统（SCADA）软件。
Schneider Electric AVEVA Vijeo Citect和Schneider Electric AVEVA CitectSCADA中存在安全漏洞，该漏洞源于程序没有充分地保护凭证。本地攻击者可利用该漏洞访问Citect用户凭证。以下产品及版本受到影响：Schneider Electric AVEVA Vijeo Citect 7.30版本，7.40版本；Schneider Electric AVEVA CitectSCADA 7.30版本，7.40版本。
solution:Upgrade schneider-electric citectscada to a higher version than 7.30,7.40,and avoid the version 7.30,7.40; Upgrade schneider-electric scada_expert_vijeo_citect to a higher version than 7.30,7.40,and avoid the version 7.30,7.40