CVE-2014-9200

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-121CWE-119

Affected software

VendorProductVersions
Schneider ElectricUnity Proall versions
Schneider ElectricSoMachineall versions
Schneider ElectricSoMoveall versions
Schneider ElectricSoMove Liteall versions
Schneider ElectricModbus Communication Library<= Version 2.2.6
Schneider ElectricCANopen Communication Library<= Version 1.0.2
Schneider ElectricEtherNet/IP Communication Library<= Version 1.0.0
Schneider ElectricEM X80 Gateway DTM (MB TCP/SL)all versions
Schneider ElectricAdvantys DTMs (OTB, STB)all versions
Schneider ElectricKINOS DTMall versions
Schneider ElectricSOLO DTMall versions
Schneider ElectricXantrex DTMall versions

References

Timeline

Published
Feb 1, 2015
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-92016.4Beckwith Electric M-6200 Digital Voltage Regulator Control with firmware before D-0198V04.07.00, M-6200A Digital Voltage Regulator Control wCVE-2014-92026.9Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.0_20150816 allow remote attackers to executCVE-2014-92035.0Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTMCVE-2014-92046.9Stack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00 allows remote attackers to execute arbitraryCVE-2014-92057.5Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.CVE-2014-92066.9Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner deviCVE-2014-92076.9Untrusted search path vulnerability in CmnView.exe in CIMON CmnView 2.14.0.1 and 3.x before UltimateAccess 3.02 allows local users to gain pCVE-2014-920810.0Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitraCVE-2014-92096.9Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 andCVE-2014-92116.1ClickDesk version 4.3 and below has persistent cross site scriptingCVE-2014-92124.3Multiple cross-site scripting (XSS) vulnerabilities in Altitude uAgent in Altitude uCI (Unified Customer Interaction) 7.5 allow remote attacCVE-2014-92157.5SQL injection vulnerability in the CheckEmail function in includes/functions.class.php in PBBoard 3.0.1 before 20141128 allows remote attack
CVE-2014-9200: High severity, CVSS 7.5 | Vulnix