CVE-2014-8514

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188. NOTE: this may be clarified later based on details provided by researchers.

• CWE-119

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/71710
• https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01Patch, Third Party Advisory, US Government Resource
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/71710
• https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01Patch, Third Party Advisory, US Government Resource

Published

Dec 27, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8508Cross-site scripting (XSS) vulnerability in s_network.asp in…
• CVE-2014-8509The lazy_bdecode function in BitTorrent bootstrap-dht (aka B…
• CVE-2014-8510The AdminUI in Trend Micro InterScan Web Security Virtual Ap…
• CVE-2014-8511Buffer overflow in an ActiveX control in Atx45.ocx in Schnei…
• CVE-2014-8512Buffer overflow in an ActiveX control in Atx45.ocx in Schnei…
• CVE-2014-8513Buffer overflow in an ActiveX control in MDraw30.ocx in Schn…
• CVE-2014-8515The web interface in BitTorrent allows remote attackers to e…
• CVE-2014-8516Unrestricted file upload vulnerability in Visual Mining NetC…9.8
• CVE-2014-8517The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as u…
• CVE-2014-8518The (1) Removable Media and (2) CD and DVD encryption offsit…
• CVE-2014-8519Unspecified vulnerability in McAfee Network Data Loss Preven…
• CVE-2014-8520McAfee Network Data Loss Prevention (NDLP) before 9.3 allows…