Schneider Electric OPC Factory Server (Ofs) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Schneider Electric OPC Factory Server (Ofs), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2014-0789schneider electricopc factory server (ofs)+5
EPSS score
2.47%
Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDLFOFS33 3.5 and earlier allow remote attackers to cause a denial of service via long arguments to unspecified functions.5.5CVE-2023-2161schneider electricopc factory server (ofs)+1
EPSS score
0.17%
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to the software by a local user.