CVE-2014-8512

Schneider Electric ProClima ATX45 SetBodyAttribute Remote Code Execution Vulnerability

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511. NOTE: this may be clarified later based on details provided by researchers.

Desbordamiento de buffer en el control de ActiveX en Atx45.ocx en Schneider Electric ProClima anterior a 6.1.7 permite a atacantes remotos ejecutar código arbitrario a través de vectores sin especificar, una vulnerabilidad diferente a CVE-2014-8511. NOTA: esto puede se puede clarificar después en base a los detalles proporcionados por los investigadores.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Schneider Electric ProClima. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the ATX45.ATX45Ctrl.1 ActiveX control in Atx45.ocx. The control does not check the length of an attacker-supplied string in the SetBodyAttribute method before copying it into a fixed length buffer on the heap. This allows an attacker to execute arbitrary code in the context of the browser process.

*Credits: Brian Gorenc - HP Zero Day Initiative

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-10-28 CVE Reserved
2014-12-27 CVE Published
2023-10-17 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01	2014-12-29
https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01	2014-12-29

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Schneider Electric Search vendor "Schneider Electric"		Proclima Search vendor "Schneider Electric" for product "Proclima"				<= 6.0.1 Search vendor "Schneider Electric" for product "Proclima" and version " <= 6.0.1"		-		Affected