Details of VAR-201304-0565

ID

VAR-201304-0565

TITLE

Schneider Electric Modbus Family Driver Buffer Overflow Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2013-03162

DESCRIPTION

The Schneider Electric Group provides products and services in the areas of energy and infrastructure, industry, data centers and networks, buildings and homes. Multiple Schneider Electric multiple products. The Modbus series driver has a buffer overflow vulnerability when parsing a project in "Programming" mode, which can be exploited to cause a buffer overflow. Successful exploitation allows arbitrary code execution. Exploiting this vulnerability requires enticing users to open malicious project files. Multiple Schneider Electric products are prone to a local buffer-overflow vulnerability because they fail to properly validate user-supplied input before copying it into a fixed-length buffer. Failed exploit attempts will result in a denial-of-service condition. The following products are vulnerable: TwidoSuite versions 2.31.04 and prior PowerSuite versions 2.6 and prior SoMove versions 1.7 and prior SoMachine versions 2.0, 3.0, 3.1, and 3.0 XS Unity Pro versions 7.0 and prior UnityLoader versions 2.3 and prior Concept versions 2.6 SR7 and prior ModbusCommDTM sl versions 2.1.2 and prior PL7 versions 4.5 SP5 and prior SFT2841 version 14 and versions 13.1 and prior OFS versions 3.50 and prior

Trust: 0.81

sources: CNVD: CNVD-2013-03162 // BID: 58999

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2013-03162

AFFECTED PRODUCTS

vendor:	schneider	model:	electric concept	scope:	-	version:	-	Trust: 0.6
vendor:	schneider	model:	electric modbuscommdtm sl	scope:	eq	version:	2.x	Trust: 0.6
vendor:	schneider	model:	electric powersuite	scope:	eq	version:	2.x	Trust: 0.6
vendor:	schneider	model:	electric unityloader	scope:	eq	version:	2.x	Trust: 0.6
vendor:	schneider	model:	electric twidosuite	scope:	eq	version:	2.x	Trust: 0.6
vendor:	schneider	model:	electric unity pro	scope:	eq	version:	6.0	Trust: 0.3
vendor:	schneider	model:	electric unity pro	scope:	eq	version:	6	Trust: 0.3
vendor:	schneider	model:	electric pl7 pro	scope:	eq	version:	4.5	Trust: 0.3

sources: CNVD: CNVD-2013-03162 // BID: 58999

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2013-03162
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2013-03162
severity:	MEDIUM
baseScore:	6.9
vectorString:	AV:L/AC:M/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.4
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2013-03162

THREAT TYPE

local

Trust: 0.3

sources: BID: 58999

TYPE

Boundary Condition Error

Trust: 0.3

sources: BID: 58999

EXTERNAL IDS

db:	SCHNEIDER	id:	SEVD-2013-070-01	Trust: 0.9
db:	SECUNIA	id:	52821	Trust: 0.6
db:	CNVD	id:	CNVD-2013-03162	Trust: 0.6
db:	BID	id:	58999	Trust: 0.3

sources: CNVD: CNVD-2013-03162 // BID: 58999

REFERENCES

url:	http://download.schneider-electric.com/files?p_file_id=47991052&p_file_name=sevd-2013-070-01.pdf	Trust: 0.9
url:	http://secunia.com/advisories/52821/	Trust: 0.6
url:	http://www.schneider-electric.com/site/home/index.cfm/ww/?selectcountry=true	Trust: 0.3

sources: CNVD: CNVD-2013-03162 // BID: 58999

CREDITS

Carsten Eiram

Trust: 0.3

sources: BID: 58999

SOURCES

db:	CNVD	id:	CNVD-2013-03162
db:	BID	id:	58999

LAST UPDATE DATE

2022-05-17T01:37:06.747000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2013-03162	date:	2013-05-28T00:00:00
db:	BID	id:	58999	date:	2013-03-11T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2013-03162	date:	2013-04-16T00:00:00
db:	BID	id:	58999	date:	2013-03-11T00:00:00