CVE-2011-3499
Published Sep 16, 2011
Last updated 7 years ago
Overview
- Description
- Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:progea:movicon_powerhmi:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3015872-AD3D-47A7-B749-E75FE2E01B22",
"versionEndIncluding": "11.2.1085"
},
{
"criteria": "cpe:2.3:a:progea:movicon_powerhmi:11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D9C3308-E740-4DC8-B267-61AC37E8C8A7"
},
{
"criteria": "cpe:2.3:a:progea:movicon_powerhmi:11.0.1017:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25B35A7C-DA0D-435C-9844-9363D19B6F38"
}
],
"operator": "OR"
}
]
}
]