CVE-2013-0658
Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request.
Affects 1 product across 1 vendor.
Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.
Show all 12
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A heap-based buffer overflow in RFManagerService.exe of Schneider Electric Accutech Manager 2.00.1 and earlier versions allows remote attackers to execute arbitrary code via a crafted HTTP request. This vulnerability has a CVSS score of 10.0, indicating critical severity, and has known exploits but no public proof-of-concept. Immediate attention is required to mitigate the risk of unauthorized access and potential system compromise.
BSID: BS-2013-GLOBAL-171051-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2013-0658?
What is the CVSS score for CVE-2013-0658?
Is CVE-2013-0658 actively exploited?
How do I remediate CVE-2013-0658?
What systems are affected by CVE-2013-0658?
What NERC-CIP standard applies to CVE-2013-0658?
What IEC 62443 requirement maps to CVE-2013-0658?
| CVE ID | CVE-2013-0658 |
|---|---|
| BSID | BS-2013-GLOBAL-171051-C BreachSpider Global ID |
| CVSS Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Published | 2013-02-15 |
| Last Modified | 2026-06-16 |
| ICS Relevance | 70% |
| Weakness (CWE) | |
| Verticals | |
| Source | NVD |
Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request.
Source: NIST NVD / MITRE CVE Database
The vulnerability can be exploited by sending a specially crafted HTTP request to the RFManagerService.exe service. The service processes the request without proper input validation, leading to a heap-based buffer overflow. This can result in remote code execution, allowing an attacker to take control of the affected system.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Affected Versions |
|---|---|---|
| Schneider-Electric | Accutech Manager | ≤ 2.00.1 |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | ⚠ Available — Reference |
| PoC Code | Not confirmed |
Implement network segmentation to isolate the Accutech Manager from untrusted networks. Apply strict firewall rules to limit access to the service only from trusted sources. Regularly monitor network traffic for suspicious activity.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. A network rule is only drafted when a concrete on-the-wire signature can be grounded in the advisory.
This CVE violates CIP-007-R2 because it allows unauthorized access to the control system, which could lead to the compromise of critical assets and operations.
This CVE maps to SR 7.6 as it involves a vulnerability that can be exploited remotely to gain unauthorized access and execute arbitrary code, which is a significant risk to the security of the industrial control system.
Drafted by AI and not validated for your network. Test in an isolated environment before any production deployment. Compensating control only - does not replace vendor patch.
AI Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | d5de375e6ed0e6c21b1f311ed2b5757912c90bce31189c3eceda038226bfbe3eb6636310744078d78f03def750422a241d7fe8df59ac28423ef287594db757a1 |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →