VAR-201503-0071

Vulnerability from variot - Updated: 2025-04-12 23:34

Buffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before 7.8.90 allows remote attackers to execute arbitrary code via unspecified vectors. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the Rvctl.RVControl.1 ActiveX Control in rvctl.dll. The control does not check the length of an attacker-supplied string in the SetText method before copying it into a fixed length buffer on the stack. This allows an attacker to execute arbitrary code in the context of the browser process. Schneider Electric Pelco DS-NVs is a set of IP video management software from Schneider Electric of France. Schneider Electric DS-NVs are prone to a stack buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it into a fixed-size buffer. Failed exploit attempts will likely result in denial-of-service conditions

Show details on source website
To clipboard 

{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "pelco ds-nv",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": "7.8.90"
      },
      {
        "_id": null,
        "model": "pelco ds-nvs",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "7.8.90"
      },
      {
        "_id": null,
        "model": "ds-nvs",
        "scope": null,
        "trust": 0.7,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "_id": null,
        "model": "electric pelco ds-nvs",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "schneider",
        "version": "7.8.90"
      },
      {
        "_id": null,
        "model": "pelco ds-nv",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "7.6.32"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-15-090"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201503-332"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-0982"
      }
    ]
  },
  "configurations": {
    "_id": null,
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:schneider_electric:pelco_ds-nv",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Ariele Caltabiano (kimiya) and Andrea Micalizzi (rgod)",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-15-090"
      },
      {
        "db": "BID",
        "id": "73096"
      }
    ],
    "trust": 1.0
  },
  "cve": "CVE-2015-0982",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2015-0982",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 2.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2015-01794",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "VHN-78928",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2015-0982",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2015-0982",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "ZDI",
            "id": "CVE-2015-0982",
            "trust": 0.7,
            "value": "HIGH"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2015-01794",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201503-332",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-78928",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-15-090"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794"
      },
      {
        "db": "VULHUB",
        "id": "VHN-78928"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201503-332"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-0982"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "Buffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before 7.8.90 allows remote attackers to execute arbitrary code via unspecified vectors. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the Rvctl.RVControl.1 ActiveX Control in rvctl.dll. The control does not check the length of an attacker-supplied string in the SetText method before copying it into a fixed length buffer on the stack. This allows an attacker to execute arbitrary code in the context of the browser process. Schneider Electric Pelco DS-NVs is a set of IP video management software from Schneider Electric of France. Schneider Electric DS-NVs are prone to a stack buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it into a fixed-size buffer. Failed exploit attempts will likely result in denial-of-service conditions",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-0982"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829"
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-090"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794"
      },
      {
        "db": "BID",
        "id": "73096"
      },
      {
        "db": "VULHUB",
        "id": "VHN-78928"
      }
    ],
    "trust": 3.15
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-0982",
        "trust": 4.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-15-071-01",
        "trust": 2.5
      },
      {
        "db": "SCHNEIDER",
        "id": "SEVD-2015-065-01",
        "trust": 2.3
      },
      {
        "db": "BID",
        "id": "73096",
        "trust": 1.0
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829",
        "trust": 0.8
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-2341",
        "trust": 0.7
      },
      {
        "db": "ZDI",
        "id": "ZDI-15-090",
        "trust": 0.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201503-332",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-78928",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-15-090"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794"
      },
      {
        "db": "VULHUB",
        "id": "VHN-78928"
      },
      {
        "db": "BID",
        "id": "73096"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201503-332"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-0982"
      }
    ]
  },
  "id": "VAR-201503-0071",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794"
      },
      {
        "db": "VULHUB",
        "id": "VHN-78928"
      }
    ],
    "trust": 1.575
  },
  "iot_taxonomy": {
    "_id": null,
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794"
      }
    ]
  },
  "last_update_date": "2025-04-12T23:34:03.805000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "Pelco DS-NVs Video Management Software Vulnerability",
        "trust": 0.8,
        "url": "http://download.schneider-electric.com/files?p_File_Id=755516404\u0026p_File_Name=SEVD-2015-065-01+Pelco+DS-NVs+Video+Mgmt+SW.pdf"
      },
      {
        "title": "Schneider Electric has issued an update to correct this vulnerability.",
        "trust": 0.7,
        "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-071-01"
      },
      {
        "title": "Patch for Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/56335"
      },
      {
        "title": "DS Installer 7.8.90",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54442"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-15-090"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201503-332"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-120",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-119",
        "trust": 0.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-78928"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-0982"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 3.2,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-15-071-01"
      },
      {
        "trust": 2.2,
        "url": "http://download.schneider-electric.com/files?p_file_id=755516404\u0026p_file_name=sevd-2015-065-01+pelco+ds-nvs+video+mgmt+sw.pdf"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-0982"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-0982"
      },
      {
        "trust": 0.1,
        "url": "http://download.schneider-electric.com/files?p_file_id=755516404\u0026amp;p_file_name=sevd-2015-065-01+pelco+ds-nvs+video+mgmt+sw.pdf"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-15-090"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794"
      },
      {
        "db": "VULHUB",
        "id": "VHN-78928"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201503-332"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-0982"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "ZDI",
        "id": "ZDI-15-090",
        "ident": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-01794",
        "ident": null
      },
      {
        "db": "VULHUB",
        "id": "VHN-78928",
        "ident": null
      },
      {
        "db": "BID",
        "id": "73096",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829",
        "ident": null
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201503-332",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2015-0982",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2015-03-12T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-090",
        "ident": null
      },
      {
        "date": "2015-03-18T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-01794",
        "ident": null
      },
      {
        "date": "2015-03-14T00:00:00",
        "db": "VULHUB",
        "id": "VHN-78928",
        "ident": null
      },
      {
        "date": "2015-03-13T00:00:00",
        "db": "BID",
        "id": "73096",
        "ident": null
      },
      {
        "date": "2015-03-17T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-001829",
        "ident": null
      },
      {
        "date": "2015-03-16T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201503-332",
        "ident": null
      },
      {
        "date": "2015-03-14T01:59:14.657000",
        "db": "NVD",
        "id": "CVE-2015-0982",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2015-03-12T00:00:00",
        "db": "ZDI",
        "id": "ZDI-15-090",
        "ident": null
      },
      {
        "date": "2015-03-18T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-01794",
        "ident": null
      },
      {
        "date": "2015-03-16T00:00:00",
        "db": "VULHUB",
        "id": "VHN-78928",
        "ident": null
      },
      {
        "date": "2015-03-13T00:00:00",
        "db": "BID",
        "id": "73096",
        "ident": null
      },
      {
        "date": "2015-03-17T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-001829",
        "ident": null
      },
      {
        "date": "2022-02-07T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201503-332",
        "ident": null
      },
      {
        "date": "2025-04-12T10:46:40.837000",
        "db": "NVD",
        "id": "CVE-2015-0982",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201503-332"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "_id": null,
    "data": "Schneider Electric Pelco DS-NVs of  DLL Vulnerable to buffer overflow",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-001829"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201503-332"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.