CVE-2010-4709
high · 7.6Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field.
7.6
CVSS
16.2%
EPSS (exploit prob.)
97th
EPSS percentile
2011-01-28
Published
AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| automatedsolutions | modbus/tcp_master_opc_server | <= 3.0.1 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.0 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.0_build_1 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.0a |
| automatedsolutions | modbus/tcp_master_opc_server | 2.1 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.2 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.2a |
| automatedsolutions | modbus/tcp_master_opc_server | 2.3 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.3a |
| automatedsolutions | modbus/tcp_master_opc_server | 2.4 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.4a |
| automatedsolutions | modbus/tcp_master_opc_server | 2.5 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.6 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.6a |
| automatedsolutions | modbus/tcp_master_opc_server | 2.6b |
| automatedsolutions | modbus/tcp_master_opc_server | 2.7 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.7a |
| automatedsolutions | modbus/tcp_master_opc_server | 2.7b |
| automatedsolutions | modbus/tcp_master_opc_server | 2.7c |
| automatedsolutions | modbus/tcp_master_opc_server | 2.7d |
| automatedsolutions | modbus/tcp_master_opc_server | 2.7e |
| automatedsolutions | modbus/tcp_master_opc_server | 2.7f |
| automatedsolutions | modbus/tcp_master_opc_server | 2.8 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.9 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.9.1 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.9.4 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.9.5 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.9_build_2.9.3 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.10 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.11 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.12 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.12.1 |
| automatedsolutions | modbus/tcp_master_opc_server | 2.12.3 |
| automatedsolutions | modbus/tcp_master_opc_server | 3.0.0 |
Check a specific version with /api/v1/cve/match.
References
- http://automatedsolutions.com/pub/asmbtcpopc/readme.htm
- http://secunia.com/advisories/43029
- http://www.exploit-db.com/exploits/16040
- http://www.kb.cert.org/vuls/id/768840
- http://www.securityfocus.com/bid/45974
- http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf
- http://www.vupen.com/english/advisories/2011/0209
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64944
- http://automatedsolutions.com/pub/asmbtcpopc/readme.htm
- http://secunia.com/advisories/43029
- http://www.exploit-db.com/exploits/16040
- http://www.kb.cert.org/vuls/id/768840
- http://www.securityfocus.com/bid/45974
- http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf
- http://www.vupen.com/english/advisories/2011/0209
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64944
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2010-4709