← Vulnerability feed

Vulnerability record · CVE-2014-9200 · published 1 February 2015

CVE-2014-9200: Schneider-electric somachine stack-based buffer overflow vulnerability

Schneider Electric · Somachine

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.

7.5 CVSS 2.0 High EPSS 5.6% · top 7.4% CWE-121 · Stack-based buffer overflowCWE-119 · Memory buffer overflow
7.5CVSS 2.0 base score
5.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/72335
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01
https://www.cisa.gov/news-events/ics-advisories/icsa-15-027-02
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01 Vendor Advisory
http://www.securityfocus.com/bid/72335
https://ics-cert.us-cert.gov/advisories/ICSA-15-027-02 Third Party AdvisoryUS Government Resource

Track CVE-2014-9200 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-7487Schneider-electric ecostruxure machine expert insufficient verification of data authenticity vulnerabilityA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modico…EPSS 0.69%9.8CVE-2020-7475Schneider-electric ecostruxure control expert injection vulnerabilityA CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in…EPSS 1.6%9.8CVE-2017-7574Schneider-electric modicon tm221ce16r firmware hard-coded credentials vulnerabilitySchneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project …EPSS 1.3%9.3CVE-2013-0662Schneider-electric concept out-of-bounds write vulnerabilityMultiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute …EPSS 22%8.8CVE-2017-7966Schneider-electric somachine uncontrolled search path element vulnerabilityA DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary…EPSS 2.4%8.6CVE-2020-7560Schneider-electric ecostruxure control expert vulnerabilityA CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ C…EPSS 1.4%7.8CVE-2020-7527Schneider-electric somove incorrect default permissions vulnerabilityIncorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege and provide full access contr…EPSS 0.33%7.8CVE-2018-7239Schneider-electric atv lift dtm untrusted search path vulnerabilityA DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 wh…EPSS 2.8%

Source: NIST National Vulnerability Database (record CVE-2014-9200), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.