- 4.1MediumCVSS base score
- 0.37%Exploitation in 30 daysEPSS · top 69% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Multiple stack-based buffer overflows in Schneider Electric VAMPSET 2.2.136 and earlier allow local users to cause a denial of service (application halt) via a malformed (1) setting file or (2) disturbance recording file.
Timeline
ID reserved
By icscert
- 24 days later
· 24 days later
Published
- 11 years later
· 11 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | Medium4.1 | AV:L/AC:M/Au:S/C:P/I:P/A:P |
| NVDNVD · Modified | 2.0 | Medium4.4 | AV:L/AC:M/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 0.37% · top 69% of all CVEs (9 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.1.
Affected products
- affected ≤ 2.2.136
- unaffected 2.2.145
What to do
Solution: Schneider Electric released an update for distribution on August 21, 2014. The VAMPSET setting tool, v.2.2.145 or newer, can be found here: http://www.schneider-electric.com/products/ww/en/2300-ied-user-software/2320-vamp-user-software/62050-vamp-software/ Schneider Electric recommends that all customers and users install and use VAMPSET v.2.2.145 or newer.
Workaround: To protect the computer and configuration files from unauthorized escalation of privileges through manipulation, Schneider Electric recommends users employ best IT practices to secure their computers and relay’s configuration files and to use User Access Control (UAC) to further improve the security of the computer. Additionally, to minimize the risk of attack, users who are not directly using this software on a regular basis are strongly encouraged to delete this application from their computer to reduce the likelihood of attack and to store relay configuration files in the client’s protected location.
References
4
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-254-01 (opens in a new tab)x_refsource_MISC
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-254-01.json (opens in a new tab)
- http://www.schneider-electric.com/products/ww/en/2300-ied-user-software/2320-vamp-user-software/62050-vamp-software/ (opens in a new tab)
- https://ics-cert.us-cert.gov/advisories/ICSA-14-254-01 (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2014-5295 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2014-5407)Record last updated .