CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-29414

A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local user sends specific string input to a local function call.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 21.2%

CVSS Severity

CVSS v3 Score 7.8

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-192-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-192-03.pdf
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-192-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-192-03.pdf

Products affected by CVE-2023-29414

Schneider-Electric » Accutech Manager » Version: 2.00.1

cpe:2.3:a:schneider-electric:accutech_manager:2.00.1
Schneider-Electric » Accutech Manager » Version: 2.00.2

cpe:2.3:a:schneider-electric:accutech_manager:2.00.2
Schneider-Electric » Accutech Manager » Version: 2.7

cpe:2.3:a:schneider-electric:accutech_manager:2.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-29414

Products

Pricing

Contact Us