PT-2013-2102 · Honeywell+1 · Hmiweb+4

Published 2013-02-24 · Updated 2013-02-25 · CVE-2013-0108

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Honeywell Enterprise Buildings Integrator versions R310, R400.2, R410.1, R410.2 SymmetrE versions R310, R410.1, R410.2 ComfortPoint Open Manager Station version R100 HMIWeb Browser client packages (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code via a crafted HTML document, due to a flaw in an ActiveX control in HscRemoteDeploy.dll.

Recommendations For Honeywell Enterprise Buildings Integrator versions R310, R400.2, R410.1, R410.2, update to a version that includes a fix for the ActiveX control vulnerability in HscRemoteDeploy.dll. For SymmetrE versions R310, R410.1, R410.2, update to a version that includes a fix for the ActiveX control vulnerability in HscRemoteDeploy.dll. For ComfortPoint Open Manager Station version R100, update to a version that includes a fix for the ActiveX control vulnerability in HscRemoteDeploy.dll. For HMIWeb Browser client packages, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2013-0108

Affected Products

Activex

Comfortpoint Open Manager Station

Hmiweb

Honeywell Enterprise Buildings Integrator

Symmetre

References · 4

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/honeywell_hscremotedeploy_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/24745 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-0108 · Security Note
• http://ics-cert.us-cert.gov/pdf/ICSA-13-053-02.pdf · Note