PT-2012-1794 · Arc Informatique · Frontvue+2

Publicado 2012-04-03 · Atualizado 2012-04-03 · CVE-2011-4044

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions ARC Informatique PcVue versions 6.0 through 10.0 ARC Informatique FrontVue ARC Informatique PlantVue

Description The issue allows remote attackers to modify files via calls to unknown methods in an unspecified ActiveX control in SVUIGrd.ocx.

Recommendations For ARC Informatique PcVue versions 6.0 through 10.0, consider disabling the SVUIGrd.ocx ActiveX control until a patch is available. For ARC Informatique FrontVue, restrict access to the SVUIGrd.ocx ActiveX control to minimize the risk of exploitation. For ARC Informatique PlantVue, avoid using the affected ActiveX control in the application until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2011-4044

Produtos afetados

Frontvue

Pcvue

Plantvue

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/pcvue_func.rb · Exploit
• 🔥 https://exploit-db.com/exploits/17975 · Exploit
• 🔥 https://exploit-db.com/exploits/17896 · Exploit
• http://us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf · Nota
• https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4044 · Nota de Segurança
• http://pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257 · Aviso do Fabricante