critical10.0Public exploit code
CVE-2011-3492
Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitra…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DaqFactory - HMI NETB Request Overflow (Metasploit)2011-09-18 · remote · windows · Verified
- DaqFactory 5.85 build 1853 - Stack Overflow2011-09-14 · dos · windows
Impact
Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Azeotech | Daqfactory | through 5.85 Versions 3.0, 3.03, 3.5, 3.05, 3.09 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/daqfactory_1-adv.txt
- http://osvdb.org/75496
- http://www.exploit-db.com/exploits/17855
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-02.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69764
- http://aluigi.altervista.org/adv/daqfactory_1-adv.txt
- http://osvdb.org/75496
- http://www.exploit-db.com/exploits/17855
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-02.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69764