CVE-2014-9200

Summary

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.

Affected Software

VendorProductVersion RangeStatus
Schneider ElectricUnity Proall versionsaffected
Schneider ElectricSoMachineall versionsaffected
Schneider ElectricSoMoveall versionsaffected
Schneider ElectricSoMove Liteall versionsaffected
Schneider ElectricModbus Communication Library0 <= Version 2.2.6affected
Schneider ElectricCANopen Communication Library0 <= Version 1.0.2affected
Schneider ElectricEtherNet/IP Communication Library0 <= Version 1.0.0affected
Schneider ElectricEM X80 Gateway DTM (MB TCP/SL)all versionsaffected
Schneider ElectricAdvantys DTMs (OTB, STB)all versionsaffected
Schneider ElectricKINOS DTMall versionsaffected
Schneider ElectricSOLO DTMall versionsaffected
Schneider ElectricXantrex DTMall versionsaffected

Weaknesses

  • CWE-121: CWE-121

ADP Enrichment

CVE Program Container

Additional References

References