Description
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Unity Pro | all versions | — |
| Schneider Electric | SoMachine | all versions | — |
| Schneider Electric | SoMove | all versions | — |
| Schneider Electric | SoMove Lite | all versions | — |
| Schneider Electric | Modbus Communication Library | ≤ Version 2.2.6 | — |
| Schneider Electric | CANopen Communication Library | ≤ Version 1.0.2 | — |
| Schneider Electric | EtherNet/IP Communication Library | ≤ Version 1.0.0 | — |
| Schneider Electric | EM X80 Gateway DTM (MB TCP/SL) | all versions | — |
| Schneider Electric | Advantys DTMs (OTB, STB) | all versions | — |
| Schneider Electric | KINOS DTM | all versions | — |
| Schneider Electric | SOLO DTM | all versions | — |
| Schneider Electric | Xantrex DTM | all versions | — |
Advisories 1
- ICSA-15-027-02 Schneider Electric Multiple Products Buffer Overflow Vulnerability CISA ICS & IT advisories · Jun 6, 2025