CVE-2015-6485

Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3030M RTUs with firmware before C3414-500-S02J2, allow remote attackers to obtain sensitive information from device memory by reading a padding field of an Ethernet packet.

Score

CVSS 3.0 5.3 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2016-03-12

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Telvent Rtu Firmware (Schneider-electric)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-16-070-01