CVE:CVE-2011-3330
CNNVD:CNNVD-201110-579
多个Schneider Electric产品中存在本地权限提升漏洞。由于UnitelWay设备驱动在处理确定输入时发生错误，攻击者可利用该漏洞执行任意代码，可能导致缓冲区溢出。
solution:Upgrade schneider-electric monitor_pro to a higher version than 7.6,and avoid the version (,7.6]; Upgrade schneider-electric opc_factory_server to a higher version than 3.34,and avoid the version (,3.34]; Upgrade schneider-electric pl7_pro to a higher version than *:sp5,and avoid the version *:sp5; Upgrade schneider-electric telemecanique_driver_pack to a higher version than 2.6,and avoid the version (,2.6]; Upgrade schneider-electric unity_pro to a higher version than 6.0,and avoid the version (,6.0]; Upgrade schneider-electric vijeo_citect to a higher version than 7.20,and avoid the version (,7.20]