critical10.0Public exploit code
CVE-2011-3499
Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitra…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- progea movicon / powerhmi 11.2.1085 - Multiple Vulnerabilities2011-09-14 · dos · windows
Impact
Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progea | Movicon Powerhmi | through 11.2.1085 Versions 11, 11.0.1017 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/movicon_3-adv.txt
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69789
- http://aluigi.altervista.org/adv/movicon_3-adv.txt
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69789