Vulnerabilities > Schneider Electric > OPC Factory Server > 3.35

DATE CVE VULNERABILITY TITLE RISK
2023-05-16 CVE-2023-2161 XXE vulnerability in Schneider-Electric OPC Factory Server
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to the software by a local user. 
local
low complexity
schneider-electric CWE-611
5.5
5.5
2014-04-01 CVE-2013-0662 Out-of-bounds Write vulnerability in Schneider-Electric products
Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.
network
schneider-electric CWE-787
critical
 9.3
9.3
2014-02-28 CVE-2014-0774 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Schneider-Electric products
Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file. 		6.9
6.9