CVE-2015-3977

Buffer overflow in Schneider Electric IMT25 Magnetic Flow DTM before 1.500.004 for the HART Protocol allows remote authenticated users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HART reply.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.7 UNKNOWN
ADJACENT_NETWORK
LOW
AV:A/AC:L/Au:S/C:C/I:C/A:C
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
VendorProductVersion
schneider-electricimt25_magnetic_flow_dtm
𝑥
≤ 1.500.000
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-215-01
https://ics-cert.us-cert.gov/advisories/ICSA-15-223-01
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-215-01
https://ics-cert.us-cert.gov/advisories/ICSA-15-223-01