CVE Catalog

CVE-2016-8352

Critical
Published: Translated: NVD NIST

Summary

An issue exists in Schneider Electric ConneXium firewalls that can trigger a stack-based buffer overflow during the SNMP login authentication process, potentially allowing an attacker to remotely execute code.

Risk Assessment

An attacker could exploit this vulnerability to gain remote control over the device, posing a significant security threat to the network.

Recommendation

It is recommended to update the firewall software to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all versions, TCSEFEC23F3F21 all versions, TCSEFEC23FCF20 all versions, TCSEFEC23FCF21 all versions, and TCSEFEC2CF3F20 all versions. A stack-based buffer overflow can be triggered during the SNMP login authentication process that may allow an attacker to remotely execute code.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS