PT-2012-1791 · Advantech/Broadwin · Webaccess

Published 2012-02-06 · Updated 2012-12-11 · CVE-2011-4041

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess version (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592, specifically targeting the webvrpcs.exe component.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2011-4041

Affected Products

Webaccess

References · 9

• 🔥 http://securityfocus.com/bid/47008 · Exploit
• 🔥 https://exploit-db.com/exploits/35495 · Exploit
• 🔥 http://reversemode.com/downloads/exploit_advantech.zip · Exploit
• 🔥 http://reversemode.com/index.php?option=com_content&task=view&id=72&Itemid=1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4041 · Security Note
• http://reversemode.com/downloads/Scada_Trojans_Ruben_Rootedcon.pdf · Note
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-11-081-01.pdf · Note
• http://securityfocus.com/archive/1/517117 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-11-094-02A.pdf · Note