Schneider Electric Accutech Manager vulnerabilities

3 CVEs affecting Schneider Electric Accutech Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6918, published 2024-08-20.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-0658, published 2013-02-15. High severity, CVSS 10.0. EPSS: 21.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request.
• CVE-2024-6918, published 2024-08-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause a crash of the Accutech Manager when receiving a specially crafted request over…
• CVE-2023-29414, published 2023-07-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local user sends specific string input to a local…