Vulnerability CVE-2011-1914


Published: 2012-02-21   Modified: 2012-02-24

Description:
Buffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Advantech -> Adam opc server 
Advantech -> Modbus rtu opc server 
Advantech -> Modbus tcp opc server 

 References:
http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-01.pdf

Copyright 2020, cxsecurity.com

 

Back to Top