Buffer overflow in Schneider Electric Vampset

CVE-2014-5407

Multiple stack-based buffer overflows in Schneider Electric VAMPSET 2.2.136 and earlier allow local users to cause a denial of service (application halt) via a malformed (1) setting file or (2) disturbance recording file.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (29.8th percentile) — read the EPSS interpretation.