CVE-2014-0774: Schneider Electric Ofs Test Client TLXCDLFOFS33
Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.
Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.
Affected products
- Schneider Electric Ofs Test Client TLXCDLFOFS33: version 3.35 only
- Schneider Electric Ofs Test Client TLXCDLTOFS33: version 3.35 only
- Schneider Electric Ofs Test Client TLXCDLUOFS33: version 3.35 only
- Schneider Electric Ofs Test Client TLXCDSTOFS33: version 3.35 only
- Schneider Electric Ofs Test Client TLXCDSUOFS33: version 3.35 only
- Schneider Electric Opc Factory Server: version 3.35 only
Published 2014-02-28. Last modified 2026-06-17.