CVE-2015-6485

MEDIUM · 5.3 CVSS Gepubliceerd: 12-03-2016 CWE-200

Beschrijving

Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3030M RTUs with firmware before C3414-500-S02J2, allow remote attackers to obtain sensitive information from device memory by reading a padding field of an Ethernet packet.

Vendors

Schneider-electric

Affected products

Telvent Rtu Firmware Sage 1410 Sage 1430 Sage 1450 Sage 2400 Sage 3030m Sage Landac Ii-2 Sage 2300

References

ics-cert.us-cert.gov