Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:opc_factory_server_(ofs):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductOpc Factory Server (Ofs) (2f310c8e-e0bc-58ff-98f7-e2f9250357e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2161 vulnerable 2026-06-08 06:02:41.522177 Details available
MEDIUM (5)
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to the software by a local user. 
Published: 2023-05-16T04:31:26.482Z
Updated: 2025-01-22T21:45:06.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0789 vulnerable 2026-06-08 05:05:14.317242 Schneider Electric OPC Factory Server Buffer Overflow
Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDLFOFS33 3.5 and earlier allow remote attackers to cause a denial of service via long arguments to unspecified functions.
Published: 2014-04-04T15:00:00.000Z
Updated: 2025-09-25T17:45:27.086Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.