PT-2014-3839

Name of the Vulnerable Software and Affected Versions Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA versions 2010 R2 build 71.4165 through 2013 R2 build 74.5094 Description The issue allows remote attackers to cause a denial of service, resulting in an...

Institute for Electric Grid Cybersecurity Girds Utilities

Critical infrastructure policymakers are advocating the foundation of a new entity, the Institute for Electric Grid Cybersecurity, along with a new set of guidelines, to better protect the North American electric grid from cyber-attacks and determine how to respond if the grid is ever compromised...

Schneider Electric Patches SCADA, ICS Security Vulnerabilities

The Industrial Control Systems Cyber Emergency Response Team ICS-CERT last week issued advisories warning of serious vulnerabilities in Schneider Electric SCADA gear. Schneider Electric is a supplier of energy management control products that are used in a number of critical industries in North...

Schneider Electric Floating License Manager权限提升漏洞

BUGTRAQ ID: 65873 CVECAN ID: CVE-2014-0759 Schneider Electric Floating License Manager是许可证管理器。 Schneider Electric Floating License Manager在实现上存在“未引用搜索路径或元素”漏洞，如果服务的可执行路径包含空格，攻击者可利用此漏洞执行恶意程序。 0 Schneider Electric Floating License Manager 1.0.0 - 1.4.0 厂商补丁： Schneider Electric ------------------...

CVE-2014-0774

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

CVE-2014-0759

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

Stack overflow

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-0774 Schneider Electric OFS Stack Buffer Overflow

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

CVE-2014-0774

CVE-2014-0774 affects Schneider Electric OPC Factory Server (OFS) – specifically the OFS Client stack (TLXCDSUOFS33, TLXCDSTOFS33, TLXCDLUOFS33, TLXCDLTOFS33, TLXCDLFOFS33 at 3.35). The root cause is a stack-based buffer overflow in the parsing of a demonstration/configuration file, which can lea...

CVE-2014-0759 Schneider Electric Floating License Manager Unquoted Search Path or Element

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-0759

CVE-2014-0759 affects Schneider Electric Floating License Manager versions 1.0.0–1.4.0. The root cause is an unquoted service path in a Windows service, so if the executable path contains a space, a local user can trigger execution of a Trojan horse and gain privileges by starting a malicious pro...

CVE-2014-0759 Schneider Electric Floating License Manager Unquoted Search Path or Element

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

PT-2014-3836

Name of the Vulnerable Software and Affected Versions Schneider Electric OPC Factory Server OFS versions 3.35 Description The issue is related to a stack-based buffer overflow in the C++ sample client. This can be exploited by local users to gain privileges through vectors involving a malformed...

CVE-2014-0774: Stack-based Buffer Overflow

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

Schneider Electric SCADA多个产品异常处理拒绝服务漏洞

CVE ID:CVE-2013-2824 施耐德电气为100多个国家的能源及基础设施、工业、数据中心及网络、楼宇和住宅市场提供整体解决方案。其中多个产品使用的SESU工具用于更新windows PC系统上的软件。 Schneider Electric多个产品服务器存在拒绝服务攻击，允许远程攻击者利用漏洞发送特制的报文，可使进程停止响应，造成拒绝服务攻击。 0 Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40 Schneider Electric Vijeo Citect 7.20 - 7.30SP1...

CVE-2014-0759: Unquoted Search Path or Element

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2013-2824

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...

Design/Logic Flaw

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...

CVE-2013-2824

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...