CVE-2014-0779

Name: CVE-2014-0779
Creator: NVD / NIST
Published: 2014-03-14T10:55:05.803+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.49%

Last modified Jun 17, 2026

CVE-2014-0779 is a vulnerability of currently unknown severity. The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build 73.4903, 2013 R1.2 build 73.4955, and 2013 R2 build 74.5094 allows remote attackers to cause a denial of service (application crash) via a crafted OPF file (aka project file).. EPSS estimates a 1.49% chance of exploitation in the next 30 days.

Description

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build 73.4903, 2013 R1.2 build 73.4955, and 2013 R2 build 74.5094 allows remote attackers to cause a denial of service (application crash) via a crafted OPF file (aka project file).

Metrics

EPSS Probability

1.49%

70.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions	Update
Aveva	Clearscada	2010	R2
Aveva	Clearscada	2013	R1

References

http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-024-01Vendor Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-14-072-01
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-024-01Vendor Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-14-072-01US Government Resource

Timeline

Published: Mar 14, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-0779?

How severe is CVE-2014-0779?

Severity scoring for CVE-2014-0779 is pending analysis. The EPSS model estimates a 1.49% probability of exploitation in the next 30 days.

How do I fix CVE-2014-0779?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-0779?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST