CVE:CVE-2013-0662
CNNVD:CNNVD-201404-005
Schneider Electric Modbus Serial Driver是法国施耐德电气（Schneider Electric）公司的一套Modbus系列（串行通讯设备类型管理器）的驱动程序。
Schneider Electric Modbus Serial Driver 1.10至3.2版本中的ModbusDrv.exe文件中存在基于栈的缓冲区溢出漏洞。远程攻击者可借助Modbus Application Header中大的buffer-size值利用该漏洞执行任意代码。
solution:Upgrade schneider-electric concept to a higher version than *:sr7,and avoid the version *:sr7; Upgrade schneider-electric modbus_serial_driver to a higher version than 1.10,2.2,3.2,and avoid the version 1.10,2.2,3.2; Upgrade schneider-electric modbuscommdtm_sl to a higher version than 2.1.2,and avoid the version (,2.1.2]; Upgrade schneider-electric opc_factory_server to a higher version than 3.5.0,3.34,3.35,and avoid the version (,3.5.0],3.34,3.35; Upgrade schneider-electric pl7 to a higher version than *:sp7,and avoid the version *:sp7; Upgrade schneider-electric powersuite to a higher version than 2.6,and avoid the version (,2.6]; Upgrade schneider-electric sft2841 to a higher version than 14.0,13.1,and avoid the version (,14.0],13.1; Upgrade schneider-electric somachine to a higher version than 3.1,2.0,3.0,and avoid the version (,3.1],2.0,3.0; Upgrade schneider-electric somove to a higher version than 1.7,and avoid the version (,1.7]; Upgrade schneider-electric twidosuite to a higher version than 2.31.04,and avoid the version (,2.31.04]; Upgrade schneider-electric unity_pro to a higher version than 7.0,6.0,and avoid the version (,7.0],6.0; Upgrade schneider-electric unityloader to a higher version than 2.3,and avoid the version (,2.3]; Upgrade schneider_electric somachine to a higher version than 3.0,and avoid the version 3.0