Buffer Overflow Vulnerability in Schneider Electric OPC Factory Server
CVE-2014-0774

Currently unrated

Key Information:

Vendor: Schneider Electric
Status: Ofs Test Client Tlxcdlfofs33; Ofs Test Client Tlxcdsuofs33; Ofs Test Client Tlxcdltofs33; Ofs Test Client Tlxcdstofs33
Vendor: CVE Published:; 28 February 2014

Summary

The vulnerability in Schneider Electric's OPC Factory Server may allow local users to escalate privileges through a stack-based buffer overflow. This issue arises from the handling of malformed configuration files in the C++ sample client, enabling the potential for unauthorized access and control. Proper mitigation strategies should be employed to handle configurations securely and prevent exploitation.

References

http://ics-cert.us-cert.gov/advisories/ICSA-14-058-02

x_refsource_MISC

http://download.schneider-electric.com/files?p_Doc_Ref=SE...

x_refsource_CONFIRM

http://www.securityfocus.com/bid/65871

vdb-entryx_refsource_BID

Timeline

Vulnerability published
Feb 28, 2014
Vulnerability Reserved
Jan 2, 2014