CVE-2013-0662

high · 9.3

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.

9.3

CVSS

22.3%

EPSS (exploit prob.)

98th

EPSS percentile

2014-04-01

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
schneider-electric	concept	<= 2.6
schneider-electric	modbus_serial_driver	1.10
schneider-electric	modbus_serial_driver	2.2
schneider-electric	modbus_serial_driver	3.2
schneider-electric	modbuscommdtm_sl	<= 2.1.2
schneider-electric	opc_factory_server	<= 3.5.0
schneider-electric	opc_factory_server	3.34
schneider-electric	opc_factory_server	3.35
schneider-electric	pl7	<= 4.5
schneider-electric	powersuite	<= 2.6
schneider-electric	sft2841	<= 14.0
schneider-electric	sft2841	13.1
schneider-electric	somachine	<= 3.1
schneider-electric	somachine	2.0
schneider-electric	somachine	3.0
schneider-electric	somove	<= 1.7
schneider-electric	twidosuite	<= 2.31.04
schneider-electric	unity_pro	<= 7.0
schneider-electric	unity_pro	6.0
schneider-electric	unityloader	<= 2.3
schneider_electric	somachine	3.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-0662