CVE-2014-9206

MEDIO 6.9CVE-2014-9206 · Published 14/03/2015 · updated 17/06/2026

In breve

CVE-2014-9206 è una vulnerabilità MEDIO (CVSS 6.9) che riguarda device type manager (schneider-electric).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.34%, superiore al 28.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
device type manager schneider-electric	`≤ 3.1.6`	No fix yet

Description

Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local users to gain privileges via a malformed DLL file.

References

download.schneider-electric.com/files · Vendor Advisory
ics-cert.us-cert.gov/advisories/ICSA-15-055-03 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free