Published: 16/09/2011 Updated: 29/08/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Progea Movicon / PowerHMI 11.2.1085 and previous versions allows remote malicious users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.

Vulnerable Product	Search on Vulmon	Subscribe to Product
progea movicon powerhmi 11.0.1017
progea movicon powerhmi 11
progea movicon powerhmi

####################################################################### Luigi Auriemma Application: Progea Movicon / PowerHMI wwwprogeacom Versions: <= 1121085 Platforms: Windows Bug: memory corruption Exploitation: remote Date: 13 Sep 2011 Author: Luigi Aurie ...

CWE-119 http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf http://aluigi.altervista.org/adv/movicon_3-adv.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/69789 https://nvd.nist.gov https://www.exploit-db.com/exploits/17842/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-3499

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect