CVE-2013-0662

Published: Apr 1, 2014Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.

Affected (21)

Products: Schneider Electric: Concept, Modbus Serial Driver, Modbuscommdtm Sl, Opc Factory Server, Pl7, Powersuite, Sft2841, Somachine, Somove, Twidosuite, Unity Pro, Unityloader

12 products

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Schneider Electric Concept	Up to 2.6
Schneider Electric Modbus Serial Driver	Version 1.10
Schneider Electric Modbus Serial Driver	Version 2.2
Schneider Electric Modbus Serial Driver	Version 3.2
Schneider Electric Modbuscommdtm Sl	Up to 2.1.2
Schneider Electric Opc Factory Server	Up to 3.5.0
Schneider Electric Opc Factory Server	Version 3.34
Schneider Electric Opc Factory Server	Version 3.35
Schneider Electric Pl7	Up to 4.5
Schneider Electric Powersuite	Up to 2.6
Schneider Electric Sft2841	Up to 14.0
Schneider Electric Sft2841	Version 13.1
Schneider Electric Somachine	Up to 3.1
Schneider Electric Somachine	Version 2.0
Schneider Electric Somachine	Version 3.0
Schneider Electric Somove	Up to 1.7
Schneider Electric Twidosuite	Up to 2.31.04
Schneider Electric Unity Pro	Up to 7.0
Schneider Electric Unity Pro	Version 6.0
Schneider Electric Unityloader	Up to 2.3
Schneider Electric Somachine	Version 3.0