CVE-2014-0779

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build 73.4903, 2013 R1.2 build 73.4955, and 2013 R2 build 74.5094 allows remote attackers to cause a denial of service (application crash) via a crafted OPF file (aka project file).

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Schneider Electric	ClearSCADA	2010 R2 (build 71.4165); 2010 R2.1 (build 71.4325); 2010 R3 (build 72.4560); 2010 R3.1 (build 72.4644)
Schneider Electric	SCADA Expert ClearSCADA	2013 R1 (build 73.4729); 2013 R1.1 (build 73.4832); 2013 R1.1a (build 73.4903); 2013 R1.2 (build 73.4955); 2013 R2 (build 74.5094)

References

http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-024-01Vendor Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-14-072-01
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-024-01Vendor Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-14-072-01US Government Resource

Timeline

Published: Mar 14, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-07809.8Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrativ CVE-2014-07819.3Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary cod CVE-2014-07828.3Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R CVE-2014-07839.0Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code CVE-2014-07848.3Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary cod CVE-2014-07865.0Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements tha CVE-2014-078710.0Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet.CVE-2014-07897.8Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS3 CVE-2014-07916.8Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to CVE-2014-07927.5Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vecto CVE-2014-07934.3Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for Joomla! allow remote CVE-2014-07944.3SQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla! allows remote authenticated users to execut