Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.
File data ot_500029.nasl
Vendor | Product | Version | CPE |
---|---|---|---|
schneider-electric | concept | * | cpe:2.3:a:schneider-electric:concept:*:sr7:*:*:*:*:*:* |
schneider-electric | modbus_serial_driver | 1.10 | cpe:2.3:a:schneider-electric:modbus_serial_driver:1.10:*:*:*:*:*:*:* |
schneider-electric | modbus_serial_driver | 2.2 | cpe:2.3:a:schneider-electric:modbus_serial_driver:2.2:*:*:*:*:*:*:* |
schneider-electric | modbus_serial_driver | 3.2 | cpe:2.3:a:schneider-electric:modbus_serial_driver:3.2:*:*:*:*:*:*:* |
schneider-electric | modbuscommdtm_sl | * | cpe:2.3:a:schneider-electric:modbuscommdtm_sl:*:*:*:*:*:*:*:* |
schneider-electric | opc_factory_server | * | cpe:2.3:a:schneider-electric:opc_factory_server:*:*:*:*:*:*:*:* |
schneider-electric | opc_factory_server | 3.34 | cpe:2.3:a:schneider-electric:opc_factory_server:3.34:*:*:*:*:*:*:* |
schneider-electric | opc_factory_server | 3.35 | cpe:2.3:a:schneider-electric:opc_factory_server:3.35:*:*:*:*:*:*:* |
schneider-electric | pl7 | * | cpe:2.3:a:schneider-electric:pl7:*:sp7:*:*:*:*:*:* |
schneider-electric | powersuite | * | cpe:2.3:a:schneider-electric:powersuite:*:*:*:*:*:*:*:* |