Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512. NOTE: this may be clarified later based on details provided by researchers.
References
Link | Resource |
---|---|
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 | |
https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01 | Third Party Advisory US Government Resource |
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 | |
https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01 | Third Party Advisory US Government Resource |
Configurations
History
21 Nov 2024, 02:19
Type | Values Removed | Values Added |
---|---|---|
References | () http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 - | |
References | () https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01 - Third Party Advisory, US Government Resource |
Information
Published : 2014-12-27 15:59
Updated : 2024-11-21 02:19
NVD link : CVE-2014-8511
Mitre link : CVE-2014-8511
CVE.ORG link : CVE-2014-8511
JSON object : View
Products Affected
schneider-electric
- proclima
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer