CVE-2011-4034: Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30...

Security readout for executives and security teams

This CVE affects older Schneider Electric/Citect historian and reporting products through a vulnerable Steema TeeChart ActiveX component. A successful remote attack could crash the affected software or run attacker-controlled code. The public bundle does not provide CVSS scoring, named fixes, or active exploitation evidence. Exposure is most likely in organizations still operating the listed legacy Schneider Electric/Citect historian or reporting products, especially where ActiveX components remain installed on operator, engineering, reporting, or historian systems. Prioritize this where affected historian or reporting systems support production visibility, compliance reporting, or operational decision-making. The issue is old but serious because legacy ICS software can remain in service long after vendor advisories are published. Mitigation focus: Identify all installations of the affected Schneider Electric/Citect products and versions.; Review Schneider Electric and Citect advisories for official updates, workarounds, or replacement guidance.; Limit network access to historian and reporting systems to trusted management zones..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.