CVE-2014-0789 | BDVDB-2026-60746 Detail
Schneider ElectricOPC Factory Server (OFS)
Description#
Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDLFOFS33 3.5 and earlier allow remote attackers to cause a denial of service via long arguments to unspecified functions.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-122 Heap-based Buffer Overflow
References#
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-093-01
- http://www.schneider-electric.com/corporate/en/support/cybersecurity/viewer-news.page?c_filepath=/templatedata/Content/News/data/en/local/cybersecurity/general_information/2014/03/20140325_vulnerability_disclosure_opc_factory_server.xml
- http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page
- http://ics-cert.us-cert.gov/advisories/ICSA-14-093-01
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.