Schneider Electric ProClima CVE-2014-8512 Remote Buffer Overflow Vulnerability
BID:71711
Info
Schneider Electric ProClima CVE-2014-8512 Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 71711 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-8512 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 10 2014 12:00AM |
| Updated: | Jan 12 2015 12:02AM |
| Credit: | Ariele Caltabiano, Andrea Micalizzi, and Brian Gorenc |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Schneider Electric ProClima CVE-2014-8512 Remote Buffer Overflow Vulnerability
Schneider Electric ProClima is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input.
Attackers can exploit this issue to execute arbitrary code in the context of the system using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
ProClima 6.0.1 and prior are vulnerable.
Schneider Electric ProClima is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input.
Attackers can exploit this issue to execute arbitrary code in the context of the system using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
ProClima 6.0.1 and prior are vulnerable.
Exploit / POC
Schneider Electric ProClima CVE-2014-8512 Remote Buffer Overflow Vulnerability
An attacker can use readily available tools to exploit this issue.
An attacker can use readily available tools to exploit this issue.
Solution / Fix
Schneider Electric ProClima CVE-2014-8512 Remote Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Schneider Electric ProClima CVE-2014-8512 Remote Buffer Overflow Vulnerability
References:
References:
- Schneider Electric Homepage (Schneider Electric)