Schneider Electric Modbus Serial Driver vulnerabilities

3 CVEs affecting Schneider Electric Modbus Serial Driver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7523, published 2020-08-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-0662, published 2014-04-01. High severity, CVSS 9.3. EPSS: 22.2% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a…
CVE-2018-7824, published 2019-05-22. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17…
CVE-2020-7523, published 2020-08-31. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus…