PT-2015-4038 · Schneider Electric · Vampset

Publicado 2015-04-03 · Atualizado 2018-10-09 · CVE-2014-8390

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Schneider Electric VAMPSET versions prior to 2.2.168

Description The issue concerns multiple buffer overflows that can be triggered by local users through malformed disturbance-recording data in a CFG or DAT file, potentially allowing them to gain privileges.

Recommendations For versions prior to 2.2.168, update to version 2.2.168 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-8390

Produtos afetados

Vampset

Referências · 6

• 🔥 http://coresecurity.com/advisories/schneider-vampset-stack-and-heap-buffer-overflow · Exploit
• http://securityfocus.com/archive/1/535142/100/0/threaded · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-15-092-01 · Nota
• http://schneider-electric.com/ww/en/download/document/SEVD-2015-084-01 · Aviso do Fabricante
• http://securityfocus.com/bid/73405 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8390 · Nota de Segurança