PT-2015-4160

CVE-2014-9206

Published

2015-03-14

Updated

2016-08-26

CVSS 2.0

6.9

Medium

MetricsAV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Invensys SRD Control Valve Positioner devices versions 3.1.6 and earlier

Description A stack-based buffer overflow issue in the Device Type Manager (DTM) allows local users to gain privileges via a malformed DLL file.

Recommendations For versions 3.1.6 and earlier, update to a version later than 3.1.6 to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾