critical10.0
CVE-2014-9190
Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via…
Impact
Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Wonderware Intouch Access Anywhere Server | Versions 10.6, 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000104.pdf
- https://www.cisa.gov/news-events/ics-advisories/icsa-15-008-02
- https://ics-cert.us-cert.gov/advisories/ICSA-15-008-02
- https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000104.pdf