PT-2012-2066 · Iconics+1 · Iconics Bizviz+2

Publicado 2012-04-18 · Atualizado 2012-04-19 · CVE-2011-5088

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS32 version 9.21 ICONICS BizViz version 9.21

Description The issue allows remote attackers to execute arbitrary code via a crafted web site, related to the configuration of the trusted zone based on user input in the GENESIS32 IcoSetServer ActiveX control. This is specifically tied to the Workbench32/WebHMI component SetTrustedZone Policy.

Recommendations For ICONICS GENESIS32 version 9.21, consider disabling the GENESIS32 IcoSetServer ActiveX control until a patch is available. For ICONICS BizViz version 9.21, restrict access to the Workbench32/WebHMI component to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2011-5088

Produtos afetados

Activex

Iconics Bizviz

Iconics Genesis32

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-5088 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-11-182-01.pdf · Nota