Schneider Electric Opc Factory Server vulnerabilities

5 CVEs affecting Schneider Electric Opc Factory Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-2161, published 2023-05-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-0662, published 2014-04-01. High severity, CVSS 9.3. EPSS: 22.2% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a…
CVE-2011-3330, published 2011-11-04. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6…
CVE-2014-0774, published 2014-02-28. Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and…
CVE-2015-1014, published 2019-03-25. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA…
CVE-2023-2161, published 2023-05-16. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to…