CVE-2014-9200CWE-121

CVE-2014-9200: falha em Schneider Electric Unity Pro

Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SoMove+ Monitorar Advantys DTMs

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 5.4%
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.
AV:N/AC:L/Au:N/C:P/I:P/A:P
Produtos afetados
Schneider Electric · Advantys DTMs (OTB, STB)Schneider Electric · CANopen Communication LibrarySchneider Electric · EM X80 Gateway DTM (MB TCP/SL)Schneider Electric · EtherNet/IP Communication LibrarySchneider Electric · KINOS DTMSchneider Electric · Modbus Communication LibrarySchneider Electric · SOLO DTMSchneider Electric · SoMachineSchneider Electric · SoMoveSchneider Electric · SoMove LiteSchneider Electric · Unity ProSchneider Electric · Xantrex DTM