Lucene search

K
cveCertccCVE-2011-1918
HistoryNov 02, 2011 - 5:55 p.m.

CVE-2011-1918

2011-11-0217:55:00
CWE-119
certcc
web.nvd.nist.gov
33
cve-2011-1918
buffer overflow
data archiver
ge intelligent platforms
remote attack
denial of service
arbitrary code execution
tcp traffic
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.6

Confidence

High

EPSS

0.179

Percentile

96.2%

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic.

Affected configurations

Nvd
Node
geintelligent_platforms_proficy_historianRange3.5
OR
geintelligent_platforms_proficy_historianMatch4.0
VendorProductVersionCPE
geintelligent_platforms_proficy_historian*cpe:2.3:a:ge:intelligent_platforms_proficy_historian:*:*:*:*:*:*:*:*
geintelligent_platforms_proficy_historian4.0cpe:2.3:a:ge:intelligent_platforms_proficy_historian:4.0:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.6

Confidence

High

EPSS

0.179

Percentile

96.2%

Related for CVE-2011-1918