Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow

7.5 CVSS

Vulnerability Description

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-9200

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Ariele Caltabiano (kimiya) with HP’s Zero Day Initiative (ZDI)

References

More from Schneider Electric

View All →

CVE-2025-9997

CWE-78: Improper Neutralization of Special Elements used in an OS...

Medium 5.8

CVE-2025-9996

CWE-78: Improper Neutralization of Special Elements used in an OS...

Medium 5.8

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege...

High 8.4

CVE-2025-7746

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...

Medium 5.3

CVE-2025-6788

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists...

Medium 5.3

Affected Vendor

Schneider Electric

View all reports →

Affected Software

Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library, CANopen Communication Library, EtherNet/IP Communication Library, EM X80 Gateway DTM (MB TCP/SL), Advantys DTMs (OTB, STB), KINOS DTM, SOLO DTM, Xantrex DTM

Vulnerable Versions:

all versions, 0