CVEvulnerability

CVE-2014-0774

6.9 MEDIUM Published 2014-02-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-02-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119, CWE-121

Description

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.

Affected configurations

• schneider-electric ofs test client tlxcdlfofs33 3.35 • schneider-electric ofs test client tlxcdltofs33 3.35 • schneider-electric ofs test client tlxcdluofs33 3.35 • schneider-electric ofs test client tlxcdstofs33 3.35 • schneider-electric ofs test client tlxcdsuofs33 3.35 • schneider-electric opc factory server 3.35

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-121 Stack-based Buffer Overflow weakness

References