Vulnerability Description
Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Proface Gp-Pro Ex Ex-Ed | <= 4.0.4 |
| Schneider-Electric | Proface Gp-Pro Ex Pfxexedls | <= 4.0.4 |
| Schneider-Electric | Proface Gp-Pro Ex Pfxexedv | <= 4.0.4 |
| Schneider-Electric | Proface Gp-Pro Ex Pfxexgrpls | <= 4.0.4 |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2016-2290?
CVE-2016-2290 is a vulnerability with a CVSS score of 8.8 (HIGH). Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary...
How severe is CVE-2016-2290?
CVE-2016-2290 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-2290?
Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Proface Gp-Pro Ex Ex-Ed, Schneider-Electric Proface Gp-Pro Ex Pfxexedls, Schneider-Electric Proface Gp-Pro Ex Pfxexedv, Schneider-Electric Proface Gp-Pro Ex Pfxexgrpls.