CVE-2013-0662

highpriority · attend · 55EPSS 0.222 · 98 %ileexploit · PoCEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · PoC

Likely / severe?

22.2% (98th) EPSS

CVSS 9.3 · high

Is it mine?

55 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a mitigation is available.

MitigationConceptcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbus Serial Driver Windows 7 32 bitcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbus Serial Driver Windows 7 64 bitcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbus Serial Driver Windows Vista 32 bitcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbus Serial Driver Windows XP 32 bitcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationModbusCommDTM slcisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationOPC Factory Server (OFS)cisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationPL7cisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationPowerSuitecisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationSFT2841cisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationSoMachinecisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationSoMovecisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationTwidoSuitecisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationUnity Procisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.
MitigationUnityLoadercisa_csaf_ot
New versions of OFS V3.5 and Unity Pro V8 include the updated ModbusDriverSuite.

cvss

Technical severity, 0–10. One row per scoring source.

9.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.4–9.3

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8.6 · impact 10

v2.09.3criticalAV:N/AC:M/Au:N/C:C/I:C/A:Csecondary · CISA US

v2.09.3criticalAV:N/AC:M/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v2.08.4highAV:N/AC:M/Au:N/C:C/I:C/A:C/E:POCsecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787USprimaryCWE-119USCWE-121US

exploits (2)

Public proof-of-concept and weaponised exploit code.

EDB-45219SEIG Modbus 3.4 - Denial of Service (PoC)PoC · exploit_db
EDB-45220SEIG Modbus 3.4 - Remote Code ExecutionPoC · exploit_db

affected products (55)

Products and version ranges known to be affected.

Schneider Electric Concept: <=2.6_SR7all versionscisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows 7 32 bit: V2.2_IE12all versionscisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows 7 64 bit: V3.2_IE12all versionscisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows Vista 32 bit: V2.2_IE12all versionscisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows XP 32 bit: V1.10_IE_v37all versionscisa_csaf_otUS
Schneider Electric ModbusCommDTM sl: <=2.1.2all versionscisa_csaf_otUS
Schneider Electric OPC Factory Server (OFS): <=3.40all versionscisa_csaf_otUS
Schneider Electric PL7: <=4.5_SP5all versionscisa_csaf_otUS
Schneider Electric PowerSuite: <=2.6all versionscisa_csaf_otUS
Schneider Electric SFT2841: 14all versionscisa_csaf_otUS
Schneider Electric SFT2841: <=13.1all versionscisa_csaf_otUS
Schneider Electric SoMachine: 2.0|3.0|3.1|3.0all versionscisa_csaf_otUS
Schneider Electric SoMove: <=1.7all versionscisa_csaf_otUS
Schneider Electric TwidoSuite: <=2.31.04all versionscisa_csaf_otUS
Schneider Electric Unity Pro: <=7.0all versionscisa_csaf_otUS
Schneider Electric UnityLoader: <=2.3all versionscisa_csaf_otUS
Schneider Electric Concept≤ 2.6_SR7cisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows 7 32 bitall versionscisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows 7 64 bitall versionscisa_csaf_otUS
Schneider Electric Modbus Serial Driver Windows Vista 32 bitall versionscisa_csaf_otUS

showing 20 of 55

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-14-086-01ASchneider Electric Serial Modbus Driver Buffer Overflow (Update A)2014-12-28icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

published 2014-04-01modified 2026-06-16

related (16,125)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-86950US	—OT critical	26.2% (98th)	KEV	2026-09-28
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1,…
CVE-2026-87491US	—OT critical	3.51% (89th)	KEV	2026-09-09
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security…
CVE-2026-53362US	—OT critical	0.71% (53rd)	KEV	2026-07-04
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branc…
CVE-2026-53266US	—OT critical	0.93% (61st)	KEV	2026-06-25
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source addre…
CVE-2026-11645US	—OT critical	2.44% (84th)	KEV	2026-06-09
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium…

+16120 more

references (15)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan