CVE-2014-9200
Estado: ModificadaAlta (7.5)—
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 5.57%
- Percentil entre todas las CVEs puntuadas: 93
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-121
- CWE-119
Referencias
- http://www.securityfocus.com/bid/72335
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01
- https://www.cisa.gov/news-events/ics-advisories/icsa-15-027-02
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01
- http://www.securityfocus.com/bid/72335
- https://ics-cert.us-cert.gov/advisories/ICSA-15-027-02
JSON original (NVD)
Mostrar
{
"id": "CVE-2014-9200",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": true,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": true,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "Schneider Electric",
"product": "Unity Pro",
"versions": [
{
"status": "affected",
"version": "all versions"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "SoMachine",
"versions": [
{
"status": "affected",
"version": "all versions"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "SoMove",
"versions": [
{
"status": "affected",
"version": "all versions"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "SoMove Lite",
"versions": [
{
"status": "affected",
"version": "all versions"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "Modbus Communication Library",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "Version 2.2.6"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "CANopen Communication Library",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "Version 1.0.2"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "EtherNet/IP Communication Library",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "Version 1.0.0"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "EM X80 Gateway DTM (MB TCP/SL)",
"versions": [
{
"status": "affected",
"version": "all versions"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "Advantys DTMs (OTB, STB)",
"versions": [
{
"status": "affected",
"version": "all versions"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "KINOS DTM",
"versions": [
{
"status": "affected",
"version": "all versions"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "SOLO DTM",
"versions": [
{
"status": "affected",
"version": "all versions"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "Xantrex DTM",
"versions": [
{
"status": "affected",
"version": "all versions"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2015-02-01T15:59:06.197",
"references": [
{
"url": "http://www.securityfocus.com/bid/72335",
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01",
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-15-027-02",
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/72335",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-027-02",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
},
{
"type": "Secondary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors."
},
{
"lang": "es",
"value": "Desbordamiento de buffer basado en pila en un fichero DLL no especificado en un juego de desarrollo DTM en Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 y anteriores, CANopen Communication Library 1.0.2 y anteriores, EtherNet/IP Communication Library 1.0.0 y anteriores, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, y Xantrex DTMs permite a atacantes remotos ejecutar código arbitrario a través de vectores no especificados."
}
],
"lastModified": "2026-06-17T00:17:55.060",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:schneider-electric:somachine:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BAB3925-C7D6-4206-AE6D-3C4EAB89917F"
},
{
"criteria": "cpe:2.3:a:schneider-electric:somove:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73CE63A7-81C5-43F1-89E3-53FD8EB3CD37"
},
{
"criteria": "cpe:2.3:a:schneider-electric:somove_lite:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B6D0A17-E249-463C-87BC-9606FE69B4E6"
},
{
"criteria": "cpe:2.3:a:schneider-electric:unity_pro:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1B1BD93-EA36-40EB-802A-2FCFA16A0B5D"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}