Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2014-9200

Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Unity Pro

Default version status: unaffected

  • all versionsaffected

Schneider Electric SoMachine

Default version status: unaffected

  • all versionsaffected

Schneider Electric SoMove

Default version status: unaffected

  • all versionsaffected

Schneider Electric SoMove Lite

Default version status: unaffected

  • all versionsaffected

Schneider Electric Modbus Communication Library

Default version status: unaffected

  • 0 to ≤ Version 2.2.6affected

Schneider Electric CANopen Communication Library

Default version status: unaffected

  • 0 to ≤ Version 1.0.2affected

Schneider Electric EtherNet/IP Communication Library

Default version status: unaffected

  • 0 to ≤ Version 1.0.0affected

Schneider Electric EM X80 Gateway DTM (MB TCP/SL)

Default version status: unaffected

  • all versionsaffected

Schneider Electric Advantys DTMs (OTB, STB)

Default version status: unaffected

  • all versionsaffected

Schneider Electric KINOS DTM

Default version status: unaffected

  • all versionsaffected

Schneider Electric SOLO DTM

Default version status: unaffected

  • all versionsaffected

Schneider Electric Xantrex DTM

Default version status: unaffected

  • all versionsaffected

References