Lucene search

K
cve[email protected]CVE-2007-4827
HistorySep 19, 2007 - 6:17 p.m.

CVE-2007-4827

2007-09-1918:17:00
CWE-119
web.nvd.nist.gov
41
cve-2007-4827
modbus/tcp
minihmi.exe
automated solutions
modbus slave
activex control
heap corruption
arbitrary code execution
remote attack

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.339 Low

EPSS

Percentile

97.0%

Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus requests to TCP port 502.

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.339 Low

EPSS

Percentile

97.0%

Related for CVE-2007-4827