PT-2010-5537 · Invensys · Invensys Foxboro I/A Series Batch+1

Luigi Auriemma · Publicado 2010-12-17 · Atualizado 2013-08-19 · CVE-2010-4557

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Invensys Wonderware InBatch versions 8.1 through 9.0 Invensys Foxboro I/A Series Batch version 8.1

Description The issue is related to a buffer overflow in the lm tcp service, which can be exploited by remote attackers. This can be achieved by sending a crafted request to port 9001, potentially allowing the execution of arbitrary code or causing a denial of service (crash).

Recommendations For Invensys Wonderware InBatch versions 8.1 through 9.0, consider restricting access to port 9001 until a patch is available. For Invensys Foxboro I/A Series Batch version 8.1, restrict access to the lm tcp service to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-4557

Produtos afetados

Invensys Foxboro I/A Series Batch

Invensys Wonderware Intouch

Referências · 10

• 🔥 http://exploit-db.com/exploits/15707 · Exploit
• 🔥 http://aluigi.org/adv/inbatch_1-adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/15707 · Exploit
• http://secunia.com/advisories/42528 · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICSA-10-348-01.pdf · Nota
• http://vupen.com/english/advisories/2010/3244 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4557 · Nota de Segurança
• http://iom.invensys.com/EN/pdfLibrary/SecurityAlert_Invensys_SecurityAlert-LFSEC00000051_12-10.pdf · Aviso do Fabricante
• http://kb.cert.org/vuls/id/647928 · Nota
• http://iom.invensys.com/EN/Pages/IOM_CyberSecurityUpdates.aspx · Aviso do Fabricante