CVE-2014-8514: Buffer Overflow
Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188. NOTE: this may be clarified later based on details provided by researchers.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8514?
CVE-2014-8514 has a critical severity rating due to its potential to allow remote code execution.
How do I fix CVE-2014-8514?
To fix CVE-2014-8514, update Schneider Electric ProClima to version 6.1.7 or later.
Which versions of Schneider Electric ProClima are affected by CVE-2014-8514?
Versions of Schneider Electric ProClima prior to 6.1.7, specifically up to and including 6.0.1, are affected by CVE-2014-8514.
Can CVE-2014-8514 be exploited remotely?
Yes, CVE-2014-8514 can be exploited remotely due to the vulnerability in the ActiveX control.
What type of vulnerability is CVE-2014-8514?
CVE-2014-8514 is classified as a buffer overflow vulnerability.