CVE-2008-2639

Citect CitectSCADA 6-7 and CitectFacilities 7 - Remote Code Execution via ODBC Server Service

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2008-2639. PoCs published by Metasploit, Kevin Finisterre, including Metasploit module exploits/windows/scada/citect_scada_odbc.

AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in CitectSCADA's ODBC daemon (CVE-2008-2639). It targets multiple versions of CitectSCADA (v5, v6, v7) by sending a malicious ODBC packet to trigger remote code execution.

Description

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16380

This is a Metasploit module exploiting a stack buffer overflow in CitectSCADA's ODBC daemon (CVE-2008-2639). It targets multiple versions of CitectSCADA (v5, v6, v7) by sending a malicious ODBC packet to trigger remote code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: CitectSCADA/CitectFacilities ODBC Service (v5.21, v5.41, v6.0, v7.0)
No auth needed
Prerequisites: Network access to the target's ODBC service (port 20222) · Vulnerable version of CitectSCADA
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by Kevin Finisterre · rubyremotewindows
https://www.exploit-db.com/exploits/6387

This is a Metasploit module exploiting a stack overflow in CitectSCADA's ODBC daemon (CVE-2008-2639). It targets multiple versions of CitectSCADA (v5, v6, v7) on various Windows platforms, delivering a reverse shell payload.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: CitectSCADA ODBC Daemon (versions 5.42, 5.50-r0, 6.0-r0, 6.10, 7.0-r0)
No auth needed
Prerequisites: Network access to the target's ODBC service (port 20222) · Target running vulnerable CitectSCADA version
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC NORMAL
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/citect_scada_odbc.rb

This Metasploit module exploits a stack buffer overflow in CitectSCADA's ODBC daemon (CVE-2008-2639) by sending a malicious packet to port 20222, targeting multiple versions of CitectSCADA (v5, v6, v7). It leverages SEH overwrites and a backward jump to execute payloads.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: CitectSCADA/CitectFacilities ODBC Daemon (v5.21, v5.41, v5.42, v5.50, v6.0, v6.10, v7.0)
No auth needed
Prerequisites: Network access to the target's ODBC service (port 20222) · Vulnerable version of CitectSCADA
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (12)

Core 12
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1834/references
Third Party Advisory, US Government Resource x_refsource_confirm
http://www.kb.cert.org/vuls/id/CTAR-7ENQNH
Various Sources x_refsource_misc
http://www.coresecurity.com/?action=item&id=2186
Various Sources x_refsource_misc
http://isc.sans.org/diary.html?storyid=4556
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30638
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1020241
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/6387
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/476345
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29634
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/493272/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3944
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42992

Scores

EPSS 0.7772
EPSS Percentile 99.5%

Details

CWE
CWE-119
Status published
Products (3)
citect/citectfacilities 7
citect/citectscada 6
citect/citectscada 7
Published Jun 16, 2008
Tracked Since Feb 18, 2026