CVE-2014-0774

Name: CVE-2014-0774
Creator: NVD / NIST
Published: 2014-02-28T06:18:54.277+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.47%

Last modified Jun 17, 2026

CVE-2014-0774 is a vulnerability of currently unknown severity. Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.. EPSS estimates a 0.47% chance of exploitation in the next 30 days.

Description

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file.

Metrics

EPSS Probability

0.47%

36.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Schneider-Electric	Ofs Test Client Tlxcdlfofs33	3.35
Schneider-Electric	Ofs Test Client Tlxcdltofs33	3.35
Schneider-Electric	Ofs Test Client Tlxcdluofs33	3.35
Schneider-Electric	Ofs Test Client Tlxcdstofs33	3.35
Schneider-Electric	Ofs Test Client Tlxcdsuofs33	3.35
Schneider-Electric	Opc Factory Server	3.35

References

http://www.securityfocus.com/bid/65871
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-031-01
https://www.cisa.gov/news-events/ics-advisories/icsa-14-058-02
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-031-01Vendor Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-14-058-02Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/65871

Timeline

Published: Feb 28, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-0774?

How severe is CVE-2014-0774?

Severity scoring for CVE-2014-0774 is pending analysis. The EPSS model estimates a 0.47% probability of exploitation in the next 30 days.

How do I fix CVE-2014-0774?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-0774?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST