PT-2010-5537 · Invensys · Invensys Foxboro I/A Series Batch+1

Luigi Auriemma · Published 2010-12-17 · Updated 2013-08-19 · CVE-2010-4557

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Invensys Wonderware InBatch versions 8.1 through 9.0 Invensys Foxboro I/A Series Batch version 8.1

Description The issue is related to a buffer overflow in the lm tcp service, which can be exploited by remote attackers. This can be achieved by sending a crafted request to port 9001, potentially allowing the execution of arbitrary code or causing a denial of service (crash).

Recommendations For Invensys Wonderware InBatch versions 8.1 through 9.0, consider restricting access to port 9001 until a patch is available. For Invensys Foxboro I/A Series Batch version 8.1, restrict access to the lm tcp service to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-4557

Affected Products

Invensys Foxboro I/A Series Batch

Invensys Wonderware Intouch

References · 10

• 🔥 http://exploit-db.com/exploits/15707 · Exploit
• 🔥 http://aluigi.org/adv/inbatch_1-adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/15707 · Exploit
• http://secunia.com/advisories/42528 · Vendor Advisory
• http://vupen.com/english/advisories/2010/3244 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4557 · Security Note
• http://iom.invensys.com/EN/pdfLibrary/SecurityAlert_Invensys_SecurityAlert-LFSEC00000051_12-10.pdf · Vendor Advisory
• http://iom.invensys.com/EN/Pages/IOM_CyberSecurityUpdates.aspx · Vendor Advisory
• http://us-cert.gov/control_systems/pdf/ICSA-10-348-01.pdf · Note
• http://kb.cert.org/vuls/id/647928 · Note