The vulnerability of Schneider Electric’s Modbus Serial Driver for programmable logic controllers allows a perpetrator to execute arbitrary code.

The multiple vulnerabilities in the Schneider Electric Modbus Serial Driver are caused by buffer overflows on the stack. Exploitation of these vulnerabilities allows an attacker to execute arbitrary code using a high value for the buffer size in the Modbus application header...