critical9.3Public exploit code
CVE-2010-4741
Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MOXA Device Manager Tool 2.1 - Remote Buffer Overflow (Metasploit)2010-11-14 · remote · windows · Verified
Impact
Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port 54321.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Device Manager | All versions |
| Moxa | Mdm Tool | through 2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://reversemode.com/index.php?option=com_content&task=view&id=70&Itemid=1
- http://www.kb.cert.org/vuls/id/237495
- http://www.kb.cert.org/vuls/id/MORO-8D9JX8
- http://www.moxa.com/support/download.aspx?d_id=2669
- http://www.us-cert.gov/control_systems/pdf/ICSA-10-301-01A.pdf
- http://reversemode.com/index.php?option=com_content&task=view&id=70&Itemid=1
- http://www.kb.cert.org/vuls/id/237495
- http://www.kb.cert.org/vuls/id/MORO-8D9JX8
- http://www.moxa.com/support/download.aspx?d_id=2669
- http://www.us-cert.gov/control_systems/pdf/ICSA-10-301-01A.pdf