CVE-2011-4055

Опубликовано: 08 янв. 2012

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL.

Ссылки

http://www.securityfocus.com/bid/51266
http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf
US Government Resource
http://www.usdata.com/sea/factorylink/en/p_nav5.asp
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72117
http://www.securityfocus.com/bid/51266
http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf
US Government Resource
http://www.usdata.com/sea/factorylink/en/p_nav5.asp
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72117

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:siemens:tecnomatix_factorylink:6.6.1:*:*:*:*:*:*:*

cpe:2.3:a:siemens:tecnomatix_factorylink:7.5.217:*:*:*:*:*:*:*

cpe:2.3:a:siemens:tecnomatix_factorylink:8.0.2.54:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.0703

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-qj5f-m5rp-v884

github

больше 3 лет назад