Schneider Electric UnitelWay Buffer Overflow

CVEs (1)

Remediations

• Schneider Electric has created a fix that modifies one of the libraries of the UnitelWay Windows Device Driver. Schneider Electric has also issued a customer notification describing the vulnerability. Vulnerability within UnitelWay Windows Device Driver, (http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page).
• Schneider Electric recommends that since the functionality of the existing version is not affected by the installation of the fix, all customers should install the fix, which is available at the following address: (http://www.scada.schneider-electric.com/download/security/HFPEP0047398R.zip)
• Schneider Electric recommends that users requiring additional assistance contact their global support center or a local customer service center. Contact information is available at the following web addresses.
• Vijeo Citect users should contact Schneider Electric’s SCADA and MES Software Support Center.
• Users of all other affected Schneider Electric products should contact their local support center. (http://www2.schneider-electric.com/sites/corporate/en/support/operations/local-operations/local-operations.page)

Affected Vendors

Affected Products (6)