CVE-2015-6485

EUVD-2015-6426 · Published Mar 12, 2016

Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3030M RTUs with firmware before C3414-500-S02J2, allow remote attackers to obtain sensitive information from device memory by reading a padding field of an Ethernet packet.

Technologies

Schneider-Electric Sage 1450Schneider-Electric Sage 2300Schneider-Electric Sage 1410Schneider-Electric Sage 2400Schneider-Electric Sage 1430Schneider-Electric Sage Landac Ii-2Schneider-Electric Telvent Rtu FirmwareSchneider-Electric Sage 3030M

Weaknesses

CWE-200

CVSS scores

v3.05.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
v2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-070-01

Potentially impacted assets

See if this affects your attack surface