Schneider Electric VAMPSET

CVSS v3 5.6 ATTENTION: Low skill level to exploit. Vendor: Schneider Electric Equipment: VAMPSET Vulnerability: Memory Corruption AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following VAMPSET setting and configuration software products: VAMPSET, versions prior ...

CVE-2017-7967

Summary (CVE-2017-7967) : Schneider Electric VAMPSET software prior to version 2.2.189 is vulnerable to memory corruption when a corrupted vf2 file is loaded. The issue occurs with malformed fill settings and is triggered in standalone mode, without a protection-relay connection. Exploitation is ...