PT-2011-3221 · Datac · Datac Realflex Realwin

Luigi Auriemma · Published 2011-04-05 · Updated 2011-09-22 · CVE-2011-1564

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DATAC RealFlex RealWin versions 2.1 (Build 6.1.10.10) and earlier

Description The issue is related to multiple integer overflows in the HMI application. Remote attackers can execute arbitrary code via crafted packets, specifically (1) On FC MISC FCS MSGBROADCAST and (2) On FC MISC FCS MSGSEND packets, which trigger a heap-based buffer overflow.

Recommendations For DATAC RealFlex RealWin versions 2.1 (Build 6.1.10.10) and earlier, consider restricting access to the HMI application until a patch is available. As a temporary workaround, avoid using the On FC MISC FCS MSGBROADCAST and On FC MISC FCS MSGSEND packets in the affected application. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2011-1564

Affected Products

Datac Realflex Realwin

References · 9

• 🔥 http://securityfocus.com/bid/46937 · Exploit
• 🔥 http://exploit-db.com/exploits/17025 · Exploit
• 🔥 https://exploit-db.com/exploits/17025 · Exploit
• 🔥 http://aluigi.org/adv/realwin_6-adv.txt · Exploit
• http://vupen.com/english/advisories/2011/0742 · Vendor Advisory
• http://secunia.com/advisories/43848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1564 · Security Note
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf · Note
• http://securityreason.com/securityalert/8177 · Note