Schneider Electric Invensys Positioner Buffer Overflow Vulnerability

OVERVIEW Ivan Sanchez from Nullcode Team has identified a buffer overflow security vulnerability in the DTM Device Type Manager software for Schneider Electric’s Invensys SRD Control Valve Positioner product line. Schneider Electric has produced a new version that mitigates this vulnerability...

CVE-2014-9206: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Device Type Manager DTM 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local users to gain privileges via a malformed DLL file...

PT-2015-4160

Name of the Vulnerable Software and Affected Versions Invensys SRD Control Valve Positioner devices versions 3.1.6 and earlier Description A stack-based buffer overflow issue in the Device Type Manager DTM allows local users to gain privileges via a malformed DLL file. Recommendations For version...