Stack-based buffer overflow in Schneider Electric... · CVE-2014-9190 · GitHub Advisory Database · GitHub

Stack-based buffer overflow in Schneider Electric...

High severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Jul 25, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist.

References

Published by the National Vulnerability Database

Jan 10, 2015

Published to the GitHub Advisory Database May 17, 2022

Last updated Jul 25, 2025

Weaknesses

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Learn more on MITRE.

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Learn more on MITRE.