Multiple Schneider Electric Products Stack Buffer Overflow Vulnerability
Multiple Schneider Electric Products are prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input.
Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
The following products are vulnerable:
TwidoSuite 2.31.04 and prior
PowerSuite 2.6 and prior
SoMove 1.7 and prior
SoMachine 2.0, 3.0, 3.1, and 3.0 XS
Unity Pro 7.0 and prior
UnityLoader 2.3 and prior
Concept 2.6 SR7 and prior
ModbusCommDTM sl 2.1.2 and prior
PL7 4.5 SP5 and prior
SFT2841 14, 13.1 and prior
OPC Factory Server 3.50 and prior