CVE-2014-8390: Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges...

Security readout for executives and security teams

CVE-2014-8390 affects Schneider Electric VAMPSET versions before 2.2.168. Malformed disturbance-recording CFG or DAT files can trigger buffer overflows that allow a local user to gain privileges. The bundle does not show active exploitation or a CVSS score. Exposure is likely limited to engineering or operations workstations running Schneider Electric VAMPSET earlier than 2.2.168, especially where users handle disturbance-recording CFG or DAT files. Treat this as a targeted workstation risk, not a broad internet-facing emergency. Remediate where VAMPSET is used in operational environments, because privilege gain on engineering systems can affect sensitive workflows. Mitigation focus: Upgrade VAMPSET to version 2.2.168 or later where applicable.; Review Schneider advisory SEVD-2015-084-01 for vendor-specific guidance.; Restrict handling of untrusted CFG and DAT disturbance-recording files..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.