Schneider-electric Monitor Improper Restriction of Operations within the Bounds of a Memory Buffer

2019-11-0800:00:00

www.tenable.com

0.006 Low

EPSS

Percentile

78.4%

JSON

Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.

File data ot_500129.nasl

VendorProductVersionCPE
schneider-electricmonitor_pro*cpe:2.3:a:schneider-electric:monitor_pro:*:*:*:*:*:*:*:*
schneider-electricopc_factory_server*cpe:2.3:a:schneider-electric:opc_factory_server:*:*:*:*:*:*:*:*
schneider-electricpl7_pro*cpe:2.3:a:schneider-electric:pl7_pro:*:sp5:*:*:*:*:*:*
schneider-electrictelemecanique_driver_pack*cpe:2.3:a:schneider-electric:telemecanique_driver_pack:*:*:*:*:*:*:*:*
schneider-electricunity_pro*cpe:2.3:a:schneider-electric:unity_pro:*:*:*:*:*:*:*:*
schneider-electricvijeo_citect*cpe:2.3:a:schneider-electric:vijeo_citect:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
schneider-electric	monitor_pro	*	cpe:2.3:a:schneider-electric:monitor_pro::::::::
schneider-electric	opc_factory_server	*	cpe:2.3:a:schneider-electric:opc_factory_server::::::::
schneider-electric	pl7_pro	*	cpe:2.3:a:schneider-electric:pl7_pro::sp5::::::*
schneider-electric	telemecanique_driver_pack	*	cpe:2.3:a:schneider-electric:telemecanique_driver_pack::::::::
schneider-electric	unity_pro	*	cpe:2.3:a:schneider-electric:unity_pro::::::::
schneider-electric	vijeo_citect	*	cpe:2.3:a:schneider-electric:vijeo_citect::::::::