CVE-2014-0774CWE-121

Schneider Electric OFS Stack Buffer Overflow

Medium · published February 28, 2014

CVSS v2.0
6.8
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.

The record
Technical detail
CVSS v2.0
6.8 · MEDIUM
Vector
AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2014-02-28T02:00Z
EPSS history
Timeline
  • 28 FEB 02:00Z
    Schneider Electric OFS Stack Buffer Overflow
    cvelistv5