CVE-2014-0774
Schneider Electric OFS Stack Buffer Overflow
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | Medium6.8 | AV:L/AC:L/Au:S/C:C/I:C/A:C |
| NVDNVD · Modified | 2.0 | Medium6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C |
- EPSS (exploitation in 30 days)
- 0.47% · top 60% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.
Weakness
Affected products
Schneider Electric · TLXCDSUOFS33
- affected V3.35
Schneider Electric · TLXCDSTOFS33
- affected V3.35
Schneider Electric · TLXCDLUOFS33
- affected V3.35
Schneider Electric · TLXCDLTOFS33
- affected V3.35
Schneider Electric · TLXCDLFOFS33
- affected V3.35
What to do
Solution: Schneider Electric has a product upgrade as well as a workaround solution that mitigates this vulnerability. Schneider Electric Security Notification SEVD 2014-031-01,”Vulnerability Disclosure – OPC Factory Server V3.35,” http://www.downloads.schneider-electric.com/?p_Conf=&p_localesFilter=&p_docTypeFilter=155589... http://www.downloads.schneider-electric.com/ The security announcements affecting the OPC Factory Server are available here: http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page Schneider Electric recommends customers to upgrade to OFS v3.4 or later (Version v3.5 is currently available). Customers that cannot upgrade are directed to remove the demonstration client from affected computers, provided it is not required for operations.
References (5)
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-058-02 (opens in a new tab)
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-031-01 (opens in a new tab)x_refsource_CONFIRM
- 65871 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- http://ics-cert.us-cert.gov/advisories/ICSA-14-058-02 (opens in a new tab)x_refsource_MISCx_transferred
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-031-01 (opens in a new tab)x_refsource_CONFIRMx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .