PT-2011-3221 · Datac · Datac Realflex Realwin

Luigi Auriemma · Publicado 2011-04-05 · Atualizado 2011-09-22 · CVE-2011-1564

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DATAC RealFlex RealWin versions 2.1 (Build 6.1.10.10) and earlier

Description The issue is related to multiple integer overflows in the HMI application. Remote attackers can execute arbitrary code via crafted packets, specifically (1) On FC MISC FCS MSGBROADCAST and (2) On FC MISC FCS MSGSEND packets, which trigger a heap-based buffer overflow.

Recommendations For DATAC RealFlex RealWin versions 2.1 (Build 6.1.10.10) and earlier, consider restricting access to the HMI application until a patch is available. As a temporary workaround, avoid using the On FC MISC FCS MSGBROADCAST and On FC MISC FCS MSGSEND packets in the affected application. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-1564

Produtos afetados

Datac Realflex Realwin

Referências · 9

• 🔥 http://securityfocus.com/bid/46937 · Exploit
• 🔥 http://exploit-db.com/exploits/17025 · Exploit
• 🔥 https://exploit-db.com/exploits/17025 · Exploit
• 🔥 http://aluigi.org/adv/realwin_6-adv.txt · Exploit
• http://vupen.com/english/advisories/2011/0742 · Aviso do Fabricante
• http://secunia.com/advisories/43848 · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1564 · Nota de Segurança
• http://securityreason.com/securityalert/8177 · Nota