CVE-2015-6485: Infoleak
First published: Sat Mar 12 2016(Updated: )
Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3030M RTUs with firmware before C3414-500-S02J2, allow remote attackers to obtain sensitive information from device memory by reading a padding field of an Ethernet packet.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Telvent Rtu Firmware | <=c3414-500-s02j1 | |
| Schneider-electric Sage 1410 | ||
| Schneider-electric Sage 1430 | ||
| Schneider-electric Sage 1450 | ||
| Schneider-electric Sage 2400 | ||
| Schneider-electric Sage 3030m | ||
| Schneider-electric Sage Landac Ii-2 | ||
| Schneider-electric Sage 2300 | ||
| Schneider-electric Telvent Rtu Firmware | <=c3413-500-001d3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/tags
- agent/description
- agent/event
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric telvent rtu firmware
- version/schneider-electric telvent rtu firmware/c3414-500-s02j1
- canonical/schneider-electric sage 1410
- canonical/schneider-electric sage 1430
- canonical/schneider-electric sage 1450
- canonical/schneider-electric sage 2400
- canonical/schneider-electric sage 3030m
- canonical/schneider-electric sage landac ii-2
- canonical/schneider-electric sage 2300
- version/schneider-electric telvent rtu firmware/c3413-500-001d3