CVE-2014-9206

Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local users to gain privileges via a malformed DLL file.

Score

CVSS 2.0 6.9 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-03-14

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Device Type Manager (Schneider-electric)

References

• http://download.schneider-electric.com/files?p_File_Id=745435959&p_File_Name=SEVD-2015-050-01.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-15-055-03