3 results (0.003 seconds)

CVSS: 8.8EPSS: 1%CPEs: 1EXPL: 0

CVE-2017-7966

https://notcve.org/view.php?id=CVE-2017-7966

A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL. Una vulnerabilidad de secuestro de DLL en el software de programación de SoMachine HVAC versión v2.1.0 de Schneider Electric, permite que un atacante remoto ejecute código arbitrario en el sistema apuntado. La vulnerabilidad existe debido a la carga inapropiada de una DLL. • http://www.schneider-electric.com/en/download/document/SEVD-2017-125-02 http://www.securityfocus.com/bid/98446 • CWE-427: Uncontrolled Search Path Element •

CVSS: 7.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-7965

https://notcve.org/view.php?id=CVE-2017-7965

A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller. Existe una vulnerabilidad de desbordamiento de búfer en el ejecutable del Software de Programación AlTracePrint.exe, en SoMachine HVAC versión v2.1.0 de Schneider Electric para el controlador Modicon M171/M172. • http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01 http://www.securityfocus.com/bid/98449 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 11%CPEs: 21EXPL: 2

CVE-2013-0662 – SEIG Modbus 3.4 - Denial of Service (PoC)

https://notcve.org/view.php?id=CVE-2013-0662

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header. Múltiples desbordamientos de buffer basado en pila en ModbusDrv.exe en Schneider Electric Modbus Serial Driver 1.10 hasta 3.2 permiten a atacantes remotos ejecutar código arbitrario a través de un valor de tamaño de buffer grande en Modbus Application Header. SEIG Modbus version 3.4 suffers from a remote code execution vulnerability. • https://www.exploit-db.com/exploits/45219 https://www.exploit-db.com/exploits/45220 http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01 http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01 http://www.securityfocus.com/bid/66500 • CWE-787: Out-of-bounds Write •