Schneider Electric Multiple Products Buffer Overflow Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-9200US | high7.5 | — | ||
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-15-027-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-027-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationAdvantys DTMs (OTB, STB)
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationCANopen Communication Library
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationEM X80 Gateway DTM (MB TCP/SL)
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationEtherNet/IP Communication Library
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationKINOS DTM
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationModbus Communication Library
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationSOLO DTM
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationSoMachine
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationSoMove
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationSoMove Lite
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationUnity Pro
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1 - MitigationXantrex DTMs
Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.
http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan