CVE-2014-0774
Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.
Published:Feb 28, 2014
Last Modified:Sep 24, 2025
EPS:Feb 28, 2014
EPSS Score:0.00063
CVSS Score:6.8
Affected Products
Vendor
Product
Action
Vendor
Schneider-electric
Product
Ofs Test Client Tlxcdlfofs33
Schneider-electric
Ofs Test Client Tlxcdlfofs33
Vendor
Schneider-electric
Product
Ofs Test Client Tlxcdltofs33
Schneider-electric
Ofs Test Client Tlxcdltofs33
Vendor
Schneider-electric
Product
Ofs Test Client Tlxcdluofs33
Schneider-electric
Ofs Test Client Tlxcdluofs33
Vendor
Schneider-electric
Product
Ofs Test Client Tlxcdstofs33
Schneider-electric
Ofs Test Client Tlxcdstofs33
Vendor
Schneider-electric
Product
Ofs Test Client Tlxcdsuofs33
Schneider-electric
Ofs Test Client Tlxcdsuofs33
Vendor
Schneider-electric
Product
Opc Factory Server
Schneider-electric
Opc Factory Server
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
