CVE-2014-9206

CVE-2014-9206 describes a stack-based buffer overflow vulnerability in Schneider Electric's Device Type Manager (DTM) 3.1.6 and earlier, specifically impacting Invensys SRD Control Valve Positioner devices 960 and 991. This flaw allows local attackers to gain elevated privileges by exploiting a malformed DLL file. With a CVSS score of 6.9, this vulnerability is considered medium severity, requiring local access and moderate attack complexity, but potentially leading to full compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, despite some community discussion and media coverage.