CVE-2013-0662: Schneider Electric Concept

High severity, CVSS 9.3. EPSS: 22.2% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.

Affected products

• Schneider Electric Concept: up to and including 2.6
• Schneider Electric Modbus Serial Driver: version 1.10 only; version 2.2 only; version 3.2 only
• Schneider Electric Modbuscommdtm Sl: up to and including 2.1.2
• Schneider Electric Opc Factory Server: up to and including 3.5.0; version 3.34 only; version 3.35 only
• Schneider Electric PL7: up to and including 4.5
• Schneider Electric Powersuite: up to and including 2.6
• Schneider Electric SFT2841: up to and including 14.0; version 13.1 only
• Schneider Electric Somachine: up to and including 3.1; version 2.0 only; version 3.0 only
• Schneider Electric Somove: up to and including 1.7
• Schneider Electric Twidosuite: up to and including 2.31.04
• Schneider Electric Unity Pro: up to and including 7.0; version 6.0 only
• Schneider Electric Unityloader: up to and including 2.3
• Schneider Electric Somachine: version 3.0 only

Published 2014-04-01. Last modified 2026-06-16.