What’s Vulnerable › Vulnerabilities

CVE-2015-6485

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-03-12 · updated 2026-06-17
• Weakness: CWE-200

Description

Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3030M RTUs with firmware before C3414-500-S02J2, allow remote attackers to obtain sensitive information from device memory by reading a padding field of an Ethernet packet.

Affected products

• Schneider-Electric Telvent Rtu Firmware: through c3414-500-s02j1; through c3413-500-001d3

References

• https://ics-cert.us-cert.gov/advisories/ICSA-16-070-01
• https://ics-cert.us-cert.gov/advisories/ICSA-16-070-01

Get alerted when CVE-2015-6485 or the next vulnerability affects your stack