Schneider Electric VAMPSET Memory Corruption Vulnerability

Schneider Electric VAMPSET is a suite of software from Schneider Electric, France, deployed in the energy industry to configure and maintain multiple relays and arc monitors. A memory corruption vulnerability exists in Schneider Electric VAMPSET version V2.2.189. Via a corrupted vf2 file, an...

CVE-2017-7967: Improper Restriction of Operations within the Bounds of a Memory Buffer

All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs...