Schneider Electric Interactive Graphical SCADA System 'dc.exe' Buffer Overflow Vulnerability
BID:57449
Info
Schneider Electric Interactive Graphical SCADA System 'dc.exe' Buffer Overflow Vulnerability
| Bugtraq ID: | 57449 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-0657 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2013 12:00AM |
| Updated: | Apr 02 2013 11:07AM |
| Credit: | Aaron Portnoy of Exodus Intelligence |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Schneider Electric Interactive Graphical SCADA System 'dc.exe' Buffer Overflow Vulnerability
The Schneider Electric Interactive Graphical SCADA System is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a fixed-length buffer.
Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
Schneider Electric Interactive Graphical SCADA System 9 and 10 are vulnerable.
The Schneider Electric Interactive Graphical SCADA System is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a fixed-length buffer.
Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
Schneider Electric Interactive Graphical SCADA System 9 and 10 are vulnerable.
Exploit / POC
Schneider Electric Interactive Graphical SCADA System 'dc.exe' Buffer Overflow Vulnerability
A commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Schneider Electric Interactive Graphical SCADA System 'dc.exe' Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Schneider Electric Interactive Graphical SCADA System 'dc.exe' Buffer Overflow Vulnerability
References:
References:
- Schneider Electric Homepage (Schneider Electric)