Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.
CVSS Vector
AV:N/AC:M/Au:N/C:C/I:C/A:CSchneider Electric Somachine
APPSchneider Electric3.0Schneider Electric Concept
APPSchneider-Electric≤ 2.6Schneider Electric Modbuscommdtm Sl
APPSchneider-Electric≤ 2.1.2Schneider Electric Modbus Serial Driver
APPSchneider-Electric1.102.23.2Schneider Electric Opc Factory Server
APPSchneider-Electric3.343.35≤ 3.5.0Schneider Electric Pl7
APPSchneider-Electric≤ 4.5Schneider Electric Powersuite
APPSchneider-Electric≤ 2.6Schneider Electric Sft2841
APPSchneider-Electric13.1≤ 14.0Schneider Electric Somachine
APPSchneider-Electric2.03.0≤ 3.1Schneider Electric Somove
APPSchneider-Electric≤ 1.7Schneider Electric Twidosuite
APPSchneider-Electric≤ 2.31.04Schneider Electric Unityloader
APPSchneider-Electric≤ 2.3Schneider Electric Unity Pro
APPSchneider-Electric6.0≤ 7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References
Related vulnerabilities
CVE-2020-7487CRITICAL9.8PL ✓same product
Niewystarczająca weryfikacja autentyczności danych w sterownikach Schneider Electric Modicon
CVE-2020-7475CRITICAL9.8PL ✓same product
Injection (reflective DLL) w produktach Schneider Electric — przesyłanie złośliwego kodu do sterownika
CVE-2017-7574CRITICAL9.8PL ✓same product
Hardcoded klucz szyfrowania AES w Schneider Electric SoMachine Basic i Modicon TM221CE16R
CVE-2020-7560HIGH8.6same product
A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and U...
CVE-2020-7523HIGH7.8same product
Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security no...