Riskcovery

CVE-2014-0774

Schneider Electric OFS Stack Buffer Overflow

State
Published
Severity
6.8 Medium
Published
Feb 28, 2014
Updated
Sep 24, 2025
Reserved
Jan 2, 2014

Read the record on cve.org

Description

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.

Scores

CVSSScoreVectorSource
2.06.8 MediumAV:L/AC:L/Au:S/C:C/I:C/A:Cicscert

Weaknesses

Affected Products

ProductVersions
TLXCDSUOFS33Schneider Electric
  • V3.35Affected
TLXCDSTOFS33Schneider Electric
  • V3.35Affected
TLXCDLUOFS33Schneider Electric
  • V3.35Affected
TLXCDLTOFS33Schneider Electric
  • V3.35Affected
TLXCDLFOFS33Schneider Electric
  • V3.35Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.