PT-2015-4155 · Schneider Electric · Advantys Dtm For Otb+11

Published 2015-02-01 · Updated 2025-09-05 · CVE-2014-9200

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Schneider Electric Unity Pro versions prior to the fixed version Schneider Electric SoMachine versions prior to the fixed version Schneider Electric SoMove versions prior to the fixed version Schneider Electric SoMove Lite versions prior to the fixed version Modbus Communication Library versions prior to 2.2.7 CANopen Communication Library versions prior to 1.0.3 EtherNet/IP Communication Library versions prior to 1.0.1 EM X80 Gateway DTM (MB TCP/SL) versions prior to the fixed version Advantys DTM for OTB versions prior to the fixed version Advantys DTM for STB versions prior to the fixed version KINOS DTM versions prior to the fixed version SOLO DTM versions prior to the fixed version Xantrex DTMs versions prior to the fixed version

Description A stack-based buffer overflow issue exists in an unspecified DLL file within certain Schneider Electric products. This issue allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For Schneider Electric Unity Pro, update to a version that includes the fix for this issue. For Schneider Electric SoMachine, update to a version that includes the fix for this issue. For Schneider Electric SoMove, update to a version that includes the fix for this issue. For Schneider Electric SoMove Lite, update to a version that includes the fix for this issue. For Modbus Communication Library, update to version 2.2.7 or later. For CANopen Communication Library, update to version 1.0.3 or later. For EtherNet/IP Communication Library, update to version 1.0.1 or later. For EM X80 Gateway DTM (MB TCP/SL), update to a version that includes the fix for this issue. For Advantys DTM for OTB, update to a version that includes the fix for this issue. For Advantys DTM for STB, update to a version that includes the fix for this issue. For KINOS DTM, update to a version that includes the fix for this issue. For SOLO DTM, update to a version that includes the fix for this issue. For Xantrex DTMs, update to a version that includes the fix for this issue.

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2014-9200

ZDI-15-040

Affected Products

Advantys Dtm For Otb

Canopen Communication Library

Em X80 Gateway Dtm

Ethernet/Ip Communication Library

Kinos Dtm

Modbus Communication Library

Solo Dtm

Somachine

Somove

Somove Lite

Unity Pro

Xantrex Dtms

References · 8

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-9200 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-040 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-027-02 · Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01 · Note
• https://t.me/cveNotify/134518 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-15-027-02 · Note
• http://securityfocus.com/bid/72335 · Note