CVE-2011-3330

2011-11-0421:55:03

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-3330

buffer overflow

unitelway

schneider electric

unity pro

opc factory server

vijeo citect

telemecanique

monitor pro

pl7 pro

arbitrary code execution

security vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

JSON

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.

Affected configurations

NVD

Node

schneider-electricmonitor_proRange≤7.6

schneider-electricopc_factory_serverRange≤3.34

schneider-electricpl7_proRange≤4.5sp5

schneider-electrictelemecanique_driver_packRange≤2.6

schneider-electricunity_proRange≤6.0

schneider-electricvijeo_citectRange≤7.20

CPENameOperatorVersion
schneider-electric:monitor_proschneider-electric monitor prole7.6
schneider-electric:opc_factory_serverschneider-electric opc factory serverle3.34
schneider-electric:pl7_proschneider-electric pl7 prole4.5
schneider-electric:telemecanique_driver_packschneider-electric telemecanique driver packle2.6
schneider-electric:unity_proschneider-electric unity prole6.0
schneider-electric:vijeo_citectschneider-electric vijeo citectle7.20

CPE	Name	Operator	Version
schneider-electric:monitor_pro	schneider-electric monitor pro	le	7.6
schneider-electric:opc_factory_server	schneider-electric opc factory server	le	3.34
schneider-electric:pl7_pro	schneider-electric pl7 pro	le	4.5
schneider-electric:telemecanique_driver_pack	schneider-electric telemecanique driver pack	le	2.6
schneider-electric:unity_pro	schneider-electric unity pro	le	6.0
schneider-electric:vijeo_citect	schneider-electric vijeo citect	le	7.20