CVE ID | CVE-2014-0774 |
CVSS SCORE | 6.8, AV:L/AC:L/Au:S/C:C/I:C/A:C |
AFFECTED VENDORS |
Schneider Electric |
AFFECTED PRODUCTS |
OPC Factory Server |
VULNERABILITY DETAILS |
The specific flaw exists within the parsing of the configuration file. A crafted configuration file will result in an exploitable stack buffer overflow. An attacker can use this to execute arbitrary code in the context of the OFS Client. |
ADDITIONAL DETAILS |
Schneider Electric has issued an update to correct this vulnerability. More details can be found at:
http://ics-cert.us-cert.gov/advisories/ICSA-14-058-02 |
DISCLOSURE TIMELINE |
|
CREDIT | 0x7A240E67 |