CyberSec.Space Logo
Back to CVE Browser

CVE-2016-8352

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0280%
EPSS Percentile27.72th
PublishedFeb 13, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all versions, TCSEFEC23F3F21 all versions, TCSEFEC23FCF20 all versions, TCSEFEC23FCF21 all versions, and TCSEFEC2CF3F20 all versions. A stack-based buffer overflow can be triggered during the SNMP login authentication process that may allow an attacker to remotely execute code.

Affected Platforms (CPE)

💻
Schneider Electric

Connexium Firmware

All versions

References & Advisories

🔗 http://www.securityfocus.com/bid/94062
🔗 https://ics-cert.us-cert.gov/advisories/ICSA-16-306-01
🔗 http://www.securityfocus.com/bid/94062
🔗 https://ics-cert.us-cert.gov/advisories/ICSA-16-306-01

Related Vulnerabilities

CVE-2021-300666.8

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security A...

CVE-2016-045110.0

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affec...

CVE-2016-045210.0

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affec...

CVE-2016-048310.0

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attack...