CVE-2013-0662

EPSS 22.1%

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/45219/unverified cve_referencewww.exploit-db.com/exploits/45220/unverified exploitdbwww.exploit-db.com/exploits/45219unverified exploitdbwww.exploit-db.com/exploits/45220unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01 http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01 https://www.exploit-db.com/exploits/45219/https://www.exploit-db.com/exploits/45220/http://www.securityfocus.com/bid/66500