{ "schema_version": "1.4.0", "id": "GHSA-vr64-4m52-33x2", "modified": "2022-05-17T03:49:36Z", "published": "2022-05-17T03:49:36Z", "aliases": [ "CVE-2014-9206" ], "details": "Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local users to gain privileges via a malformed DLL file.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9206" }, { "type": "WEB", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-055-03" }, { "type": "WEB", "url": "http://download.schneider-electric.com/files?p_File_Id=745435959&p_File_Name=SEVD-2015-050-01.pdf" } ], "database_specific": { "cwe_ids": [ "CWE-119" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-03-14T01:59:00Z" } }