PT-2012-1201 · Schneider Electric+1 · Citectscada+1
Publicado
2012-09-15
·
Atualizado
2019-09-15
·
CVE-2011-5163
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
CitectSCADA versions prior to 7.20
Mitsubishi MX4 SCADA versions prior to 7.20
Description
The issue is caused by a buffer overflow in an unspecified third-party component in the Batch module, allowing local users to execute arbitrary code via a long string in a login sequence. This can be exploited by an attacker using a long string, potentially leading to the execution of arbitrary code.
Recommendations
For CitectSCADA versions prior to 7.20, update to version 7.20 or later to resolve the issue.
For Mitsubishi MX4 SCADA versions prior to 7.20, update to version 7.20 or later to resolve the issue.
As a temporary workaround, consider restricting access to the login sequence to minimize the risk of exploitation.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Citectscada
Mitsubishi Mx4 Scada