CVE-2014-9200CWE-121

Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow

High · published February 1, 2015

CVSS v2.0
7.5
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.

The record
Technical detail
CVSS v2.0
7.5 · HIGH
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.05417 · 92.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2015-02-01T15:00Z
EPSS history
Timeline
  • 01 FEB 15:00Z
    Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow
    cvelistv5