PT-2015-4160 · Invensys · Invensys Srd Control Valve Positioner

Publicado 2015-03-14 · Atualizado 2016-08-26 · CVE-2014-9206

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Invensys SRD Control Valve Positioner devices versions 3.1.6 and earlier

Description A stack-based buffer overflow issue in the Device Type Manager (DTM) allows local users to gain privileges via a malformed DLL file.

Recommendations For versions 3.1.6 and earlier, update to a version later than 3.1.6 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-9206

Produtos afetados

Invensys Srd Control Valve Positioner

Referências · 3

• http://download.schneider-electric.com/files?p_File_Id=745435959&p_File_Name=SEVD-2015-050-01.pdf · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-15-055-03 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9206 · Nota de Segurança