CVE-2014-9200
Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.
Timeline
- CVE published
- Record last updated
Affected versions
- Schneider Electric Unity Pro
All versions
- Schneider Electric SoMachine
All versions
- Schneider Electric SoMove
All versions
- Schneider Electric SoMove Lite
All versions
- Schneider Electric Modbus Communication Library
through Version 2.2.6
- Schneider Electric CANopen Communication Library
through Version 1.0.2
- Schneider Electric EtherNet/IP Communication Library
through Version 1.0.0
- Schneider Electric EM X80 Gateway DTM (MB TCP/SL)
All versions
- Schneider Electric Advantys DTMs (OTB, STB)
All versions
- Schneider Electric KINOS DTM
All versions
- Schneider Electric SOLO DTM
All versions
- Schneider Electric Xantrex DTM
All versions