Unscored severity · published Apr 1, 2014
CVE-2013-0662
Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large…
–
CVSS
22.2%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.
Exploitation
Is it being used?
Exploit prediction (EPSS)22.2% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Concept · Schneider-electric
through 2.6 · source: NVD
MS
Modbus Serial Driver · Schneider-electric
1.10; 2.2; 3.2 · source: NVD
MS
Modbuscommdtm SL · Schneider-electric
through 2.1.2 · source: NVD
OF
Opc Factory Server · Schneider-electric
through 3.5.0; 3.34; 3.35 · source: NVD
PL
Pl7 · Schneider-electric
through 4.5 · source: NVD
PO
Powersuite · Schneider-electric
through 2.6 · source: NVD
SF
Sft2841 · Schneider-electric
through 14.0; 13.1 · source: NVD
SO
Somachine · Schneider-electric
through 3.1; 2.0; 3.0 · source: NVD
SO
Somove · Schneider-electric
through 1.7 · source: NVD
TW
Twidosuite · Schneider-electric
through 2.31.04 · source: NVD
UP
Unity Pro · Schneider-electric
through 7.0; 6.0 · source: NVD
UN
Unityloader · Schneider-electric
through 2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0662
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0662
Vendor Advisory
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01
Mitigation
http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01
Third Party Advisory
http://www.securityfocus.com/bid/66500
Exploit
https://www.exploit-db.com/exploits/45219/
Exploit
https://www.exploit-db.com/exploits/45220/
More from Somachine
9.8
CVE-2020-7487
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258…
9.8
CVE-2017-7574
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability
8.8
CVE-2017-7966
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system
7.5
CVE-2020-7488
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241,…
6.8
CVE-2020-28220
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware (All versions prior to V5.0.4.11) and…