CVE-2016-2290: Schneider Electric Proface Gp-Pro Ex Ex-Ed

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Schneider Electric Proface Gp-Pro Ex Ex-Ed: up to and including 4.0.4
• Schneider Electric Proface Gp-Pro Ex Pfxexedls: up to and including 4.0.4
• Schneider Electric Proface Gp-Pro Ex Pfxexedv: up to and including 4.0.4
• Schneider Electric Proface Gp-Pro Ex Pfxexgrpls: up to and including 4.0.4

Published 2016-04-06. Last modified 2026-06-17.