CVE-2011-3499

Опубликовано: 16 сент. 2011

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.

Ссылки

http://aluigi.altervista.org/adv/movicon_3-adv.txt
Exploit
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/69789
http://aluigi.altervista.org/adv/movicon_3-adv.txt
Exploit
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/69789

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:progea:movicon_powerhmi:*:*:*:*:*:*:*:*

Версия до 11.2.1085 (включая)

cpe:2.3:a:progea:movicon_powerhmi:11:*:*:*:*:*:*:*

cpe:2.3:a:progea:movicon_powerhmi:11.0.1017:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.54924

Средний

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-qm8f-5cf9-f84f

github

больше 3 лет назад