{"id":"CVE-2013-0662","url":"https://www.cyber-defence.io/tools/cve/CVE-2013-0662","generatedAt":"2026-11-05T07:10:53.044Z","title":"Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.","description":"Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.","published":"2014-04-01T06:17:08.000Z","lastModified":"2026-06-16T23:49:52.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"2.0","score":9.3,"severity":"HIGH","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"cwe":["CWE-787"],"affected":["schneider-electric/concept","schneider-electric/modbus serial driver","schneider-electric/modbuscommdtm sl","schneider-electric/opc factory server","schneider-electric/pl7","schneider-electric/powersuite","schneider-electric/sft2841","schneider-electric/somachine","schneider-electric/somove","schneider-electric/twidosuite","schneider-electric/unity pro","schneider-electric/unityloader","schneider electric/somachine"],"epss":{"score":0.22217,"percentile":0.97687,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":2,"verified":false,"firstPublished":"2018-08-20","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":45220,"kind":"exploit","title":"SEIG Modbus 3.4 - Remote Code Execution","url":"https://www.exploit-db.com/exploits/45220","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows_x86/remote/45220.py","file":"exploits/windows_x86/remote/45220.py","published":"2018-08-20","added":"2018-08-20","updated":"2018-08-20","author":"Alejandro Parodi","type":"remote","platform":"windows_x86","port":null,"verified":false,"codes":["CVE-2013-0662"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":45219,"kind":"exploit","title":"SEIG Modbus 3.4 - Denial of Service (PoC)","url":"https://www.exploit-db.com/exploits/45219","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows_x86/dos/45219.py","file":"exploits/windows_x86/dos/45219.py","published":"2018-08-20","added":"2018-08-20","updated":"2018-08-20","author":"Alejandro Parodi","type":"dos","platform":"windows_x86","port":27700,"verified":false,"codes":["CVE-2013-0662"],"tags":"Denial of Service (DoS)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 22.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01","tags":["Vendor Advisory"],"source":"ics-cert@hq.dhs.gov"},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01","tags":["Mitigation","Third Party Advisory","US Government Resource"],"source":"ics-cert@hq.dhs.gov"},{"url":"http://www.securityfocus.com/bid/66500","tags":["Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://www.exploit-db.com/exploits/45219/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://www.exploit-db.com/exploits/45220/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01","tags":["Mitigation","Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/66500","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45219/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45220/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-0662","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}