CVE-2017-7967

All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs when fill settings are intentionally malformed and is opened in a standalone state, without connection to a protection relay. This attack is not considered to be remotely exploitable. This vulnerability has no effect on the operation of the protection relay to which VAMPSET is connected. As Windows operating system remains operational and VAMPSET responds, it is able to be shut down through its normal closing protocol.

• CWE-119

• http://www.schneider-electric.com/en/download/document/SEVD-2017-061-01/Vendor Advisory
• http://www.securityfocus.com/bid/97124
• http://www.schneider-electric.com/en/download/document/SEVD-2017-061-01/Vendor Advisory
• http://www.securityfocus.com/bid/97124

Published

May 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7961The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.…7.8
• CVE-2017-7962The iwgif_read_image function in imagew-gif.c in libimagewor…
• CVE-2017-7963The GNU Multiple Precision Arithmetic Library (GMP) interfac…
• CVE-2017-7964Zyxel WRE6505 devices have a default TELNET password of 1234…
• CVE-2017-7965A buffer overflow vulnerability exists in Programming Softwa…7.3
• CVE-2017-7966A DLL Hijacking vulnerability in the programming software in…
• CVE-2017-7968An Incorrect Default Permissions issue was discovered in Sch…
• CVE-2017-7969A cross-site request forgery vulnerability exists on the Sec…
• CVE-2017-7970A vulnerability exists in Schneider Electric's PowerSCADA An…
• CVE-2017-7971A vulnerability exists in Schneider Electric's PowerSCADA An…
• CVE-2017-7972A vulnerability exists in Schneider Electric's PowerSCADA An…
• CVE-2017-7973A SQL injection vulnerability exists in Schneider Electric's…