CVE-2014-9200

2015-02-0115:59:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2014-9200

buffer overflow

schneider electric

unity pro

somachine

modbus communication

security vulnerability

remote code execution

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.182 Low

EPSS

Percentile

96.2%

JSON

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.

CPENameOperatorVersion
schneider-electric:somoveschneider-electric somoveeq-
schneider-electric:somove_liteschneider-electric somove liteeq-
schneider-electric:somachineschneider-electric somachineeq-
schneider-electric:unity_proschneider-electric unity proeq-

CPE	Name	Operator	Version
schneider-electric:somove	schneider-electric somove	eq	-
schneider-electric:somove_lite	schneider-electric somove lite	eq	-
schneider-electric:somachine	schneider-electric somachine	eq	-
schneider-electric:unity_pro	schneider-electric unity pro	eq	-