CVE-2011-1914
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors.
Desbordamiento de buffer en Advantech ADAM OLE para el control ActiveX Process Control (OPC) Server de ADAM OPC Server anteriores a 3.01.012, Modbus RTU OPC Server anteriores a 3.01.010, y Modbus TCP OPC Server anteriores a 3.01.010 permite a atacantes remotos ejecutar código arbitrrio a través de vectores sin especificar.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-05-09 CVE Reserved
- 2012-02-21 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-01.pdf | 2012-02-23 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Advantech Search vendor "Advantech" | Adam Opc Server Search vendor "Advantech" for product "Adam Opc Server" | <= 3.01.011 Search vendor "Advantech" for product "Adam Opc Server" and version " <= 3.01.011" | - |
Affected
| ||||||
| Advantech Search vendor "Advantech" | Modbus Rtu Opc Server Search vendor "Advantech" for product "Modbus Rtu Opc Server" | <= 3.01.010 Search vendor "Advantech" for product "Modbus Rtu Opc Server" and version " <= 3.01.010" | - |
Affected
| ||||||
| Advantech Search vendor "Advantech" | Modbus Tcp Opc Server Search vendor "Advantech" for product "Modbus Tcp Opc Server" | <= 3.01.09 Search vendor "Advantech" for product "Modbus Tcp Opc Server" and version " <= 3.01.09" | - |
Affected
| ||||||