Notifications pour un CVE
Restez informé de toutes modifications pour un CVE spécifique.
Descriptions du CVE
Schneider Electric OFS Stack Buffer Overflow
Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.Solutions du CVE
Schneider Electric has a product upgrade as well as a workaround
solution
that mitigates this
vulnerability.
Schneider Electric Security Notification SEVD
2014-031-01,”Vulnerability Disclosure – OPC Factory Server V3.35,”
http://www.downloads.schneider-electric.com/?p_Conf=&p_localesFilter=&p_docTypeFilter=155589... http://www.downloads.schneider-electric.com/
The security announcements affecting the OPC Factory Server are available here:
http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page
Schneider
Electric recommends customers to upgrade to OFS v3.4 or later (Version
v3.5 is currently available). Customers that cannot upgrade are directed
to remove the demonstration client from affected computers, provided it
is not required for operations.
Informations du CVE
Faiblesses connexes
| Nom de la faiblesse | Source | |
|---|---|---|
| Stack-based Buffer Overflow A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
||
| Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
Métriques
| Métriques | Score | Gravité | CVSS Vecteur | Source |
|---|---|---|---|---|
| V2 | 6.8 | AV:L/AC:L/Au:S/C:C/I:C/A:C | ||
| V2 | 6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C | nvd@nist.gov |
EPSS
EPSS est un modèle de notation qui prédit la probabilité qu'une vulnérabilité soit exploitée.
Score EPSS
Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.
Percentile EPSS
Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.
Products Mentioned
Configuraton 0
Schneider-electric>>Ofs_test_client_tlxcdlfofs33 >> Version 3.35
Schneider-electric>>Ofs_test_client_tlxcdltofs33 >> Version 3.35
Schneider-electric>>Ofs_test_client_tlxcdluofs33 >> Version 3.35
Schneider-electric>>Ofs_test_client_tlxcdstofs33 >> Version 3.35
Schneider-electric>>Ofs_test_client_tlxcdsuofs33 >> Version 3.35
Schneider-electric>>Opc_factory_server >> Version 3.35
Références
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-031-01
Tags : x_refsource_CONFIRM
Tags : x_refsource_CONFIRM
http://ics-cert.us-cert.gov/advisories/ICSA-14-058-02
Tags : Third Party Advisory, US Government Resource
Tags : Third Party Advisory, US Government Resource
