Description
Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | TLXCDSUOFS33 | V3.35 | — |
| Schneider Electric | TLXCDSTOFS33 | V3.35 | — |
| Schneider Electric | TLXCDLUOFS33 | V3.35 | — |
| Schneider Electric | TLXCDLTOFS33 | V3.35 | — |
| Schneider Electric | TLXCDLFOFS33 | V3.35 | — |
Advisories 1
- ICSA-14-058-02 Schneider Electric OFS Buffer Overflow Vulnerability CISA ICS & IT advisories · Jun 9, 2025