Modbus_serial_driver - Vulncode-DB

Repositories	Unknown: This might be proprietary software.
#Vulnerabilities	3

Date	Id	Summary	Products	Score
2020-08-31	CVE-2020-7523	Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.	Modbus_driver_suite, Modbus_serial_driver	7.8
2014-04-01	CVE-2013-0662	Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.	Concept, Modbus_serial_driver, Modbuscommdtm_sl, Opc_factory_server, Pl7, Powersuite, Sft2841, Somachine, Somove, Twidosuite, Unity_pro, Unityloader, Somachine	N/A
2019-05-22	CVE-2018-7824	An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.	Driver_suite, Modbus_serial_driver	4.9