Buffer Overflow Vulnerabilities in Schneider Electric OPC Factory Server

CVE-2014-0789

Summary

Multiple buffer overflow vulnerabilities exist within the OPC Automation 2.0 Server Object ActiveX control of Schneider Electric's OPC Factory Server. These flaws can be exploited by remote attackers, potentially leading to a denial of service by delivering excessively long arguments to unspecified functions. Affected versions include TLXCDSUOFS33, TLXCDSTOFS33, TLXCDLUOFS33, TLXCDLTOFS33, and TLXCDLFOFS33, all version 3.5 and earlier. Proper mitigation strategies and updates are critical to safeguard against these exploitable vulnerabilities.

References