Skip to content
CVE Tracker
Back

CVE-2014-0789

Schneider Electric OPC Factory Server Buffer Overflow

Medium5.0EPSS 2.5%
Published
Updated
Reserved
Assigned by
icscert

Description

Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDLFOFS33 3.5 and earlier allow remote attackers to cause a denial of service via long arguments to unspecified functions.

Scores

CVSS scores of CVE-2014-0789, by who scored it
Scored byCVSSScoreVector
icscertCNA (assigner)2.0Medium5.0AV:N/AC:L/Au:N/C:N/I:N/A:P
NVDNVD · Modified2.0High7.8AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS (exploitation in 30 days)
2.5% · top 15% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.

Weakness

Affected products

  • Schneider Electric · OPC Factory Server (OFS)

    • affected ≤ TLXCDSUOFS33 – V3.5
    • affected ≤ TLXCDSTOFS33 – V3.5
    • affected ≤ TLXCDLUOFS33 – V3.5
    • affected ≤ TLXCDLTOFS33 – V3.5
    • affected ≤ TLXCDLFOFS33 – V3.5

What to do

Solution: Schneider Electric has developed a patch to resolve this issue. In order to patch the installation in the field, install OFS V3.5SP1, available on Schneider Electric’s web site at the following URL:  http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page

References (4)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .