CVE-2011-3322

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Procyon Core Server HMI 1.13 - 'Coreservice.exe' Remote Stack Buffer Overflow (Metasploit)2011-09-12 · remote · windows · Verified

Impact

Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an out-of-bounds read or write, leading to a stack-based buffer overflow.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/75371
• http://secunia.com/advisories/45866
• http://securityreason.com/securityalert/8374
• http://www.exploit-db.com/exploits/17827
• http://www.securityfocus.com/bid/49480
• http://www.stratsec.net/Research/Advisories/Procyon-Core-Server-HMI-Remote-Stack-Overflow
• http://www.uscert.gov/control_systems/pdf/ICSA-11-216-01.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69632
• http://osvdb.org/75371
• http://secunia.com/advisories/45866
• http://securityreason.com/securityalert/8374
• http://www.exploit-db.com/exploits/17827
• http://www.securityfocus.com/bid/49480
• http://www.stratsec.net/Research/Advisories/Procyon-Core-Server-HMI-Remote-Stack-Overflow
• http://www.uscert.gov/control_systems/pdf/ICSA-11-216-01.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69632