exploitDog

CVE-2007-4827

Опубликовано: 19 сент. 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus requests to TCP port 502.

Ссылки

http://dvlabs.tippingpoint.com/advisory/TPTI-07-15
Patch
http://osvdb.org/38259
http://www.automatedsolutions.com/pub/asmbslv/ReadMe.htm
Patch
http://www.kb.cert.org/vuls/id/981849
US Government Resource
http://www.nessus.org/plugins/index.php?view=single&id=26066
http://www.securityfocus.com/archive/1/479967/100/0/threaded
http://www.securityfocus.com/bid/25713
http://www.securitytracker.com/id?1018707
https://exchange.xforce.ibmcloud.com/vulnerabilities/36677
http://dvlabs.tippingpoint.com/advisory/TPTI-07-15
Patch
http://osvdb.org/38259
http://www.automatedsolutions.com/pub/asmbslv/ReadMe.htm
Patch
http://www.kb.cert.org/vuls/id/981849
US Government Resource
http://www.nessus.org/plugins/index.php?view=single&id=26066
http://www.securityfocus.com/archive/1/479967/100/0/threaded
http://www.securityfocus.com/bid/25713
http://www.securitytracker.com/id?1018707
https://exchange.xforce.ibmcloud.com/vulnerabilities/36677

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:automated_solutions:modbus_slave_activex_control:*:*:*:*:*:*:*:*

Версия до 1.4 (включая)

EPSS

Процентиль: 91%

0.04734

Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-r92j-qh57-4mrf

github

больше 4 лет назад

Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus requests to TCP port 502.

EPSS

Процентиль: 91%

0.04734

Низкий

7.5 High

CVSS2

Дефекты

CWE-119