Schneider.Electric.GP-Pro.EX.ParseAPI.Heap.Buffer.Overflow

Description

This indicates an attack attempt to exploit a Buffer Overflow vulnerability in Schneider Electric GP-Pro EX.
The vulnerability is due to improper checking on user supplied data while the vulnerable method handles incoming request. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and execute arbitrary code within the context of the application.

Affected Products

Schneider Electric GP-Pro EX

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue

References