{"schemaVersion":3,"id":"CVE-2014-9200","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.","dates":{"published":"2015-02-01T15:00:00.000Z","modified":"2025-09-05T21:34:15.852Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"CVE.org","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"CVE.org","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.05417,"percentile":0.92626,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":-0.14999999999999944,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.05567},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.05417,"percentile":0.92626}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05567,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05417,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.05417,"percentile":0.92626}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-121","name":"Stack-based Buffer Overflow","description":"A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/121.html"},{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"schneider electric","product":"advantys dtms (otb, stb)","name":"Advantys DTMs (OTB, STB)","label":"advantys dtms (otb, stb)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/schneider_electric/advantys_dtms_otb_stb"},{"vendor":"schneider electric","product":"canopen communication library","name":"CANopen Communication Library","label":"canopen communication library","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ Version 1.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ Version 1.0.2","eol":null,"hubHref":"/vendor/schneider_electric/canopen_communication_library"},{"vendor":"schneider electric","product":"em x80 gateway dtm (mb tcp/sl)","name":"EM X80 Gateway DTM (MB TCP/SL)","label":"em x80 gateway dtm (mb tcp/sl)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/schneider_electric/em_x80_gateway_dtm_mb_tcpsl"},{"vendor":"schneider electric","product":"ethernet/ip communication library","name":"EtherNet/IP Communication Library","label":"ethernet/ip communication library","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ Version 1.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ Version 1.0.0","eol":null,"hubHref":"/vendor/schneider_electric/ethernetip_communication_library"},{"vendor":"schneider electric","product":"kinos dtm","name":"KINOS DTM","label":"kinos dtm","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/schneider_electric/kinos_dtm"},{"vendor":"schneider electric","product":"modbus communication library","name":"Modbus Communication Library","label":"modbus communication library","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ Version 2.2.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ Version 2.2.6","eol":null,"hubHref":"/vendor/schneider_electric/modbus_communication_library"},{"vendor":"schneider electric","product":"solo dtm","name":"SOLO DTM","label":"solo dtm","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/schneider_electric/solo_dtm"},{"vendor":"schneider_electric","product":"somachine","name":"somachine","label":"somachine","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/schneider_electric/somachine"},{"vendor":"schneider electric","product":"somove","name":"SoMove","label":"somove","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/schneider_electric/somove"},{"vendor":"schneider electric","product":"somove lite","name":"SoMove Lite","label":"somove lite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/schneider_electric/somove_lite"},{"vendor":"schneider electric","product":"unity pro","name":"Unity Pro","label":"unity pro","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/schneider_electric/unity_pro"},{"vendor":"schneider electric","product":"xantrex dtm","name":"Xantrex DTM","label":"xantrex dtm","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/schneider_electric/xantrex_dtm"},{"vendor":"schneider-electric","product":"somachine","name":"somachine","label":"somachine","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/schneider-electric/somachine"},{"vendor":"schneider-electric","product":"somove","name":"somove","label":"somove","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/schneider-electric/somove"},{"vendor":"schneider-electric","product":"somove_lite","name":"somove lite","label":"somove_lite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/schneider-electric/somove_lite"},{"vendor":"schneider-electric","product":"unity_pro","name":"unity pro","label":"unity_pro","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/schneider-electric/unity_pro"}],"affectedCount":16,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01","label":"download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01","hostname":"download.schneider-electric.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.securityfocus.com/bid/72335","label":"www.securityfocus.com/bid/72335","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-15-027-02","label":"www.cisa.gov/news-events/ics-advisories/icsa-15-027-02","hostname":"www.cisa.gov","tags":[]},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01","label":"download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-009-01","hostname":"download.schneider-electric.com","tags":["X Refsource CONFIRM","X Transferred","Vendor Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-027-02","label":"ics-cert.us-cert.gov/advisories/ICSA-15-027-02","hostname":"ics-cert.us-cert.gov","tags":["X Refsource MISC","X Transferred","Third Party Advisory","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2015-02-01T15:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-09-05T21:34:15.852Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:57:17.846Z","stale":false,"partial":false}}