CVE-2016-2291

published 2016-04-06

CVE-2016-2291: Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute…

medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C H I N A N

Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	proface_gp-pro_ex_ex-ed	<= 4.0.4	—
schneider-electric	proface_gp-pro_ex_pfxexedls	<= 4.0.4	—
schneider-electric	proface_gp-pro_ex_pfxexedv	<= 4.0.4	—
schneider-electric	proface_gp-pro_ex_pfxexgrpls	<= 4.0.4	—

CWE-125