CVE-2011-3491
high · 10Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.
10
CVSS
16.2%
EPSS (exploit prob.)
97th
EPSS percentile
2011-09-16
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| progea | movicon_powerhmi | <= 11.2.1085 |
| progea | movicon_powerhmi | 11 |
| progea | movicon_powerhmi | 11.0.1017 |
Check a specific version with /api/v1/cve/match.
References
- http://aluigi.altervista.org/adv/movicon_1-adv.txt
- http://osvdb.org/75494
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69787
- http://aluigi.altervista.org/adv/movicon_1-adv.txt
- http://osvdb.org/75494
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69787
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2011-3491