CVE-2012-0254

Опубликовано: 08 сент. 2012

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS) Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls (ECC) SymmetrE R410.1 allows remote attackers to execute arbitrary code via unspecified vectors.

Ссылки

http://www.us-cert.gov/control_systems/pdf/ICSA-12-150-01.pdf
Third Party Advisory
US Government Resource
https://www.honeywellprocess.com/en-US/support/pages/all-notifications.aspx
Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-12-150-01.pdf
Third Party Advisory
US Government Resource
https://www.honeywellprocess.com/en-US/support/pages/all-notifications.aspx
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:honeywell:enterprise_building_manager:r400:*:*:*:*:*:*:*

cpe:2.3:a:honeywell:enterprise_building_manager:r410.1:*:*:*:*:*:*:*

cpe:2.3:a:honeywell:experion:r200:*:*:*:*:*:*:*

cpe:2.3:a:honeywell:experion:r300:*:*:*:*:*:*:*

cpe:2.3:a:honeywell:experion:r310:*:*:*:*:*:*:*

cpe:2.3:a:honeywell:experion:r400.0:*:*:*:*:*:*:*

cpe:2.3:a:honeywell:symmetre:r410.1:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02585

Низкий

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-6whg-2qc2-5q4g

github

почти 4 года назад