high7.6Public exploit code
CVE-2010-4709
Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and po…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Automated Solutions Modbus/TCP OPC Server - Remote Heap Corruption (PoC)2011-01-25 · dos · windows · Verified
Impact
Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Automatedsolutions | Modbus\/Tcp Master Opc Server | through 3.0.1 Versions 2.0, 2.0_build_1, 2.0a, 2.1, 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://automatedsolutions.com/pub/asmbtcpopc/readme.htm
- http://secunia.com/advisories/43029
- http://www.exploit-db.com/exploits/16040
- http://www.kb.cert.org/vuls/id/768840
- http://www.securityfocus.com/bid/45974
- http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf
- http://www.vupen.com/english/advisories/2011/0209
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64944
- http://automatedsolutions.com/pub/asmbtcpopc/readme.htm
- http://secunia.com/advisories/43029
- http://www.exploit-db.com/exploits/16040
- http://www.kb.cert.org/vuls/id/768840
- http://www.securityfocus.com/bid/45974
- http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf
- http://www.vupen.com/english/advisories/2011/0209
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64944