CVE-2015-3977

high

Published 2015-11-15 · Modified 2026-05-06

CVSS v3

—

CVSS v2

7.7

VIR risk

7.7

Description

Buffer overflow in Schneider Electric IMT25 Magnetic Flow DTM before 1.500.004 for the HART Protocol allows remote authenticated users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HART reply.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: ics-cert@hq.dhs.gov — http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-215-01

References

http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-215-01
https://ics-cert.us-cert.gov/advisories/ICSA-15-223-01
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-215-01
https://ics-cert.us-cert.gov/advisories/ICSA-15-223-01

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.