Schneider Electric Multiple Products Buffer Overflow Vulnerability

A local attacker with access to an engineering workstation could exploit this buffer overflow to execute arbitrary code, potentially gaining control of IED/PLC programming environments and the devices they manage. This could lead to unauthorized modification of control logic or supervisory commands on connected industrial equipment.

Energy sector operators using Schneider Electric engineering tools (Unity Pro, SoMachine, SoMove) and devices communicating via Modbus, CANopen, or EtherNet/IP protocols. This includes utilities managing PLC-based control systems, variable frequency drives, gateways, and distributed I/O terminals that rely on these libraries for communication and programming.

An attacker would need to supply malformed data or files that trigger the buffer overflow in the vulnerable software running on an engineering workstation. Once code execution is achieved on the workstation, the attacker could use integrated development or communication features to push malicious configurations or control commands to connected PLCs, gateways, or other industrial devices.