Vulnerabilities > Schneider Electric > Vampset > 2.2.145

DATE CVE VULNERABILITY TITLE RISK
2017-05-09 CVE-2017-7967 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Schneider-Electric Vampset 2.2.145
All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used.
local
low complexity
schneider-electric CWE-119
2.1
2015-04-03 CVE-2014-8390 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Schneider-Electric Vampset 2.2.145
Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed disturbance-recording data in a (1) CFG or (2) DAT file.
4.4