CVE-2014-0774

Currently unrated

Key Information:

Vendor: Schneider Electric
Status: Ofs Test Client Tlxcdlfofs33; Ofs Test Client Tlxcdsuofs33; Ofs Test Client Tlxcdltofs33; Ofs Test Client Tlxcdstofs33
Vendor: CVE Published:; 28 February 2014

Summary

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.

References

http://ics-cert.us-cert.gov/advisories/ICSA-14-058-02

x_refsource_MISC

http://download.schneider-electric.com/files?p_Doc_Ref=SE...

x_refsource_CONFIRM

http://www.securityfocus.com/bid/65871

vdb-entryx_refsource_BID

EPSS Score

18% chance of being exploited in the next 30 days.

Timeline

Vulnerability published
Feb 28, 2014
Vulnerability Reserved
Jan 2, 2014