ICSA-15-027-02

icsaUScisa_csaf_ot

Schneider Electric Multiple Products Buffer Overflow Vulnerability

Advisory ansehen veröffentlicht 2015-10-30

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2014-9200UShigh7.5—
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

  • MitigationAdvantys DTMs (OTB, STB)

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationCANopen Communication Library

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationEM X80 Gateway DTM (MB TCP/SL)

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationEtherNet/IP Communication Library

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationKINOS DTM

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationModbus Communication Library

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationSOLO DTM

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationSoMachine

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationSoMove

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationSoMove Lite

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationUnity Pro

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
  • MitigationXantrex DTMs

    Schneider Electric has released a patch that resolves the vulnerability by removing the vulnerable DLL. Schneider Electric’s patch is available at the follow location: (http://download.schneider-electric.com/files?p_Doc_Ref=FDT1) DLL Removal Kit.

    http://download.schneider-electric.com/files?p_Doc_Ref=FDT1
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan