CVE-2013-0662

highPriorität · beachten · 55EPSS 0.222 · 98. PerzentilExploit · PoCEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · PoC

Likely / severe?

22.2% (98th) EPSS

CVSS 9.3 · high

Is it mine?

55 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationConceptcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbus Serial Driver Windows 7 32 bitcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbus Serial Driver Windows 7 64 bitcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbus Serial Driver Windows Vista 32 bitcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbus Serial Driver Windows XP 32 bitcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbusCommDTM slcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationOPC Factory Server (OFS)cisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationPL7cisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationPowerSuitecisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationSFT2841cisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationSoMachinecisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationSoMovecisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationTwidoSuitecisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationUnity Procisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationUnityLoadercisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.4–9.3

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 10

v2.09.3criticalAV:N/AC:M/Au:N/C:C/I:C/A:Csecondary · CISA US

v2.09.3criticalAV:N/AC:M/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v2.08.4highAV:N/AC:M/Au:N/C:C/I:C/A:C/E:POCsecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-787USprimärCWE-119USCWE-121US

Exploits (2)

Öffentlicher Proof-of-Concept- und Exploit-Code.

EDB-45219SEIG Modbus 3.4 - Denial of Service (PoC)PoC · exploit_db
EDB-45220SEIG Modbus 3.4 - Remote Code ExecutionPoC · exploit_db

betroffene Produkte (55)

Betroffene Produkte und Versionsbereiche.

Schneider Electric Concept: <=2.6_SR7alle Versionencisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows 7 32 bit: V2.2_IE12alle Versionencisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows 7 64 bit: V3.2_IE12alle Versionencisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows Vista 32 bit: V2.2_IE12alle Versionencisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows XP 32 bit: V1.10_IE_v37alle Versionencisa_csaf_otUS
Schneider Electric ModbusCommDTM sl: <=2.1.2alle Versionencisa_csaf_otUS
Schneider Electric OPC Factory Server (OFS): <=3.40alle Versionencisa_csaf_otUS
Schneider Electric PL7: <=4.5_SP5alle Versionencisa_csaf_otUS
Schneider Electric PowerSuite: <=2.6alle Versionencisa_csaf_otUS
Schneider Electric SFT2841: 14alle Versionencisa_csaf_otUS
Schneider Electric SFT2841: <=13.1alle Versionencisa_csaf_otUS
Schneider Electric SoMachine: 2.0|3.0|3.1|3.0alle Versionencisa_csaf_otUS
Schneider Electric SoMove: <=1.7alle Versionencisa_csaf_otUS
Schneider Electric TwidoSuite: <=2.31.04alle Versionencisa_csaf_otUS
Schneider Electric Unity Pro: <=7.0alle Versionencisa_csaf_otUS
Schneider Electric UnityLoader: <=2.3alle Versionencisa_csaf_otUS
Schneider Electric Concept≤ 2.6_SR7cisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows 7 32 bitalle Versionencisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows 7 64 bitalle Versionencisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows Vista 32 bitalle Versionencisa_csaf_otUS

20 von 55 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-14-086-01ASchneider Electric Serial Modbus Driver Buffer Overflow (Update A)2014-12-28icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2014-04-01geändert 2026-06-16

verwandt (16,125)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-86950US	—OT kritisch	26.2% (98th)	KEV	2026-09-28
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1,…
CVE-2026-87491US	—OT kritisch	3.51% (89th)	KEV	2026-09-09
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security…
CVE-2026-53362US	—OT kritisch	0.71% (53rd)	KEV	2026-07-04
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branc…
CVE-2026-53266US	—OT kritisch	0.93% (61st)	KEV	2026-06-25
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source addre…
CVE-2026-11645US	—OT kritisch	2.44% (84th)	KEV	2026-06-09
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium…

+16120 weitere

Referenzen (15)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan