Schneider Electric VAMPSET Software Buffer Overflow Vulnerability

OVERVIEW Schneider Electric has notified NCCIS/ICS-CERT of a buffer overflow vulnerability in the Schneider Electric VAMPSET software product. Ricardo Narvaja and Joaquín Rodríguez of Core Security reported this vulnerability directly to Schneider Electric. Schneider Electric has published a...

CVE-2014-5407

Multiple stack-based buffer overflows in Schneider Electric VAMPSET 2.2.136 and earlier allow local users to cause a denial of service application halt via a malformed 1 setting file or 2 disturbance recording file...

Stack overflow

Multiple stack-based buffer overflows in Schneider Electric VAMPSET 2.2.136 and earlier allow local users to cause a denial of service application halt via a malformed 1 setting file or 2 disturbance recording file...

CVE-2014-5407 Schneider Electric VAMPSET Stack-based Buffer Overflow

Multiple stack-based buffer overflows in Schneider Electric VAMPSET 2.2.136 and earlier allow local users to cause a denial of service application halt via a malformed 1 setting file or 2 disturbance recording file...

CVE-2014-5407

CVE-2014-5407 affects Schneider Electric’s VAMPSET software (version 2.2.136 and earlier). The issue is a stack-based buffer overflow triggered when opening corrupted VAMPSET setting files or disturbance recording files, leading to a local denial of service (application halt). No public exploits ...

Schneider Electric VAMPSET Buffer Overflow

OVERVIEW Aivar Liimets of Martem AS has identified a buffer overflow vulnerability in Schneider Electric’s VAMPSET software product. He reported it directly to Schneider Electric who reported it to NCCIC/ICS-CERT once the problem was fixed. Schneider Electric has produced an update that mitigates...