Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-0779
HistoryMar 14, 2014 - 10:55 a.m.

CVE-2014-0779

2014-03-1410:55:05
CWE-119
[email protected]
web.nvd.nist.gov
40
kepware
kepserverex
schneider electric
struxureware
scada
clearscada
plc driver
cve-2014-0779
denial of service
remote attackers

6.7 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.246 Low

EPSS

Percentile

96.7%

JSON

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build 73.4903, 2013 R1.2 build 73.4955, and 2013 R2 build 74.5094 allows remote attackers to cause a denial of service (application crash) via a crafted OPF file (aka project file).

Affected configurations

NVD
Node
avevaclearscadaMatch2010r2
OR
avevaclearscadaMatch2010r2.1
OR
avevaclearscadaMatch2010r3
OR
avevaclearscadaMatch2010r3.1
OR
avevaclearscadaMatch2013r1
OR
avevaclearscadaMatch2013r1.1
OR
avevaclearscadaMatch2013r1.1a
OR
avevaclearscadaMatch2013r1.2
OR
avevaclearscadaMatch2013r2

Related

checkpoint_advisories 1
ics 1
nvd 1
zdi 1
cvelist 1
prion 1
checkpoint_advisories
checkpoint_advisories
Schneider Electric ClearSCADA OPF File Parsing Out of Bounds Array Indexing (CVE-2014-0779)
2014-05-18 00:00:00
ics
ics
Schneider Electric StruxureWare SCADA Expert ClearSCADA Parsing Vulnerability
2018-09-06 12:00:00
nvd
nvd
CVE-2014-0779
2014-03-14 10:55:05
zdi
zdi
Schneider-Electric ClearSCADA ServerMain.exe OPF File Parsing Remote Code Execution Vulnerability
2014-04-03 00:00:00
cvelist
cvelist
CVE-2014-0779
2014-03-14 10:00:00
prion
prion
Design/Logic Flaw
2014-03-14 10:55:00

6.7 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.246 Low

EPSS

Percentile

96.7%

JSON
Related for CVE-2014-0779
checkpoint_advisories1ics1nvd1zdi1cvelist1prion1