Schneider Electric Wonderware InTouch Access Anywhere Server Remote Buffer Overflow Vulnerability

Bugtraq ID:	71951
Class:	Boundary Condition Error
CVE:	CVE-2014-9190
Remote:	Yes
Local:	No
Published:	Jan 08 2015 12:00AM
Updated:	Mar 19 2015 08:13AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Schneider Electric Wonderware InTouch Access Anywhere Server Remote Buffer Overflow Vulnerability

Schneider Electric Wonderware InTouch Access Anywhere Server is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input.

Attackers can exploit this issue to execute arbitrary code in the context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions.

Wonderware InTouch Access Anywhere Server 10.6 and 11.0 are vulnerable; other versions may also be affected.

Schneider Electric Wonderware InTouch Access Anywhere Server Remote Buffer Overflow Vulnerability

An attacker can use readily available tools to exploit this issue.

Schneider Electric Wonderware InTouch Access Anywhere Server Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Schneider Electric Wonderware InTouch Access Anywhere Server Remote Buffer Overflow Vulnerability

References:

• Schneider Electric Homepage (Schneider Electric)