CVE-2013-0662

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

22.22% chance of exploitation in the next 30 days, 98th percentile

Published

2014-03-28

Updated

2024-08-06

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/45220
• https://www.exploit-db.com/exploits/45219

Security advisories

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01
• http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01
• http://www.securityfocus.com/bid/66500

References

• CVE Record
• NVD entry