Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3.5 with version v7.20 of Vijeo Citect/CitectSCADA.. If the application attempts to open that file, the application could crash or allow the attacker to execute arbitrary code. Schneider Electric recommends vulnerable users upgrade the OFS to V3.5 and install the latest service pack (SP 6 or newer) for their associated version.
CVSS Information
N/A
Vulnerability Type
对搜索路径元素未加控制
Vulnerability Title
Schneider Electric OPC Factory Server 安全漏洞
Vulnerability Description
Schneider Electric OPC Factory Server（OFS）是法国施耐德电气（Schneider Electric）公司的一套资料通讯编辑软件。该软件支持重要资讯存取、开放式页面设计、透明的架构与互通性等，使用户获得良好流程和沟通效果。 Schneider Electric OFS 3.5 SP6之前版本中存在任意代码执行漏洞。攻击者可利用该漏洞在受影响应用程序上下文中执行任意代码，或使应用程序崩溃，造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A