Lucene search

K
cve[email protected]CVE-2013-0662
HistoryApr 01, 2014 - 6:17 a.m.

CVE-2013-0662

2014-04-0106:17:08
CWE-787
web.nvd.nist.gov
76
cve
2013
0662
modbus serial driver
schneider electric
buffer overflow
remote code execution
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.115 Low

EPSS

Percentile

95.3%

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.

Affected configurations

NVD
Node
schneider-electricconceptRange≀2.6sr7
OR
schneider-electricmodbus_serial_driverMatch1.10
OR
schneider-electricmodbus_serial_driverMatch2.2
OR
schneider-electricmodbus_serial_driverMatch3.2
OR
schneider-electricmodbuscommdtm_slRange≀2.1.2
OR
schneider-electricopc_factory_serverRange≀3.5.0
OR
schneider-electricopc_factory_serverMatch3.34
OR
schneider-electricopc_factory_serverMatch3.35
OR
schneider-electricpl7Range≀4.5sp7
OR
schneider-electricpowersuiteRange≀2.6
OR
schneider-electricsft2841Range≀14.0
OR
schneider-electricsft2841Match13.1
OR
schneider-electricsomachineRange≀3.1
OR
schneider-electricsomachineMatch2.0
OR
schneider-electricsomachineMatch3.0-
OR
schneider-electricsomoveRange≀1.7
OR
schneider-electrictwidosuiteRange≀2.31.04
OR
schneider-electricunity_proRange≀7.0
OR
schneider-electricunity_proMatch6.0
OR
schneider-electricunityloaderRange≀2.3
OR
schneider_electricsomachineMatch3.0xs

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.115 Low

EPSS

Percentile

95.3%