CVE-2010-4557
8.2 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.041 Low
EPSS
Percentile
92.1%
Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request to port 9001.
Affected configurations
References
aluigi.org/adv/inbatch_1-adv.txt
iom.invensys.com/EN/Pages/IOM_CyberSecurityUpdates.aspx
iom.invensys.com/EN/pdfLibrary/SecurityAlert_Invensys_SecurityAlert-LFSEC00000051_12-10.pdf
secunia.com/advisories/42528
www.exploit-db.com/exploits/15707
www.kb.cert.org/vuls/id/647928
www.us-cert.gov/control_systems/pdf/ICSA-10-348-01.pdf
www.vupen.com/english/advisories/2010/3244
Related
8.2 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.041 Low
EPSS
Percentile
92.1%