CVEvulnerability
CVE-2013-0662
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-04-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.
Affected configurations
• schneider-electric concept (<= 2.6)
• schneider-electric modbus serial driver 1.10
• schneider-electric modbus serial driver 2.2
• schneider-electric modbus serial driver 3.2
• schneider-electric modbuscommdtm sl (<= 2.1.2)
• schneider-electric opc factory server (<= 3.5.0)
• schneider-electric opc factory server 3.34
• schneider-electric opc factory server 3.35
• schneider-electric pl7 (<= 4.5)
• schneider-electric powersuite (<= 2.6)
• schneider-electric sft2841 (<= 14.0)
• schneider-electric sft2841 13.1
• schneider-electric somachine (<= 3.1)
• schneider-electric somachine 2.0
• schneider-electric somachine 3.0
• schneider-electric somove (<= 1.7)
• schneider-electric twidosuite (<= 2.31.04)
• schneider-electric unity pro (<= 7.0)
• schneider-electric unity pro 6.0
• schneider-electric unityloader (<= 2.3)
• schneider electric somachine 3.0
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01 Vendor Advisory
- http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01 Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/66500 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/45219/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/45220/ Exploit, Third Party Advisory, VDB Entry
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01 Vendor Advisory
- http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01 Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/66500 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/45219/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/45220/ Exploit, Third Party Advisory, VDB Entry