CVE-2014-9190 Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow
HighCVSS 10.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric wonderware intouch access anywhere server | = 10.6 | No fix listed |
| schneider-electric wonderware intouch access anywhere server | = 11.0 | No fix listed |
| Schneider Electric InTouch Access Anywhere Server | = 10.6 | No fix listed |
| Schneider Electric InTouch Access Anywhere Server | = 11.0 | No fix listed |
References
- wdnresource.wonderware.com
- www.cisa.gov
- ics-cert.us-cert.gov third-party-advisory us-government-resource