Schneider Electric Serial Modbus Driver Buffer Overflow (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-14-086-01A Schneider Electric Serial Modbus Driver Buffer Overflow that was published March 27, 2014, on the NCCIC/ICS-CERT web site. Carsten Eiram of Risk-Based Security has identified a stack-based buffer overflo...

CVE-2013-0662

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header...

Stack overflow

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header...

CVE-2013-0662

The CVE-2013-0662 vulnerability affects Schneider Electric’s Modbus Serial Driver (ModbusDrv.exe) used by multiple Schneider Electric products. A stack-based buffer overflow is triggered when a large value is specified in the Modbus Application Header, enabling remote code execution with the user...

PT-2014-1965

Name of the Vulnerable Software and Affected Versions Schneider Electric Modbus Serial Driver versions 1.10 through 3.2 Description The issue is caused by multiple stack-based buffer overflows in ModbusDrv.exe, allowing remote attackers to execute arbitrary code via a large buffer-size value in a...

CVE-2013-0662: Out-of-bounds Write

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header...