Lucene search

K
cveMitreCVE-2011-3491
HistorySep 16, 2011 - 2:28 p.m.

CVE-2011-3491

2011-09-1614:28:13
CWE-119
mitre
web.nvd.nist.gov
23
cve
buffer overflow
progea movicon
powerhmi
denial of service
nvd
security vulnerability

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

High

EPSS

0.025

Percentile

90.2%

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.

Affected configurations

Nvd
Node
progeamovicon_powerhmiRange11.2.1085
OR
progeamovicon_powerhmiMatch11
OR
progeamovicon_powerhmiMatch11.0.1017
VendorProductVersionCPE
progeamovicon_powerhmi*cpe:2.3:a:progea:movicon_powerhmi:*:*:*:*:*:*:*:*
progeamovicon_powerhmi11cpe:2.3:a:progea:movicon_powerhmi:11:*:*:*:*:*:*:*
progeamovicon_powerhmi11.0.1017cpe:2.3:a:progea:movicon_powerhmi:11.0.1017:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

High

EPSS

0.025

Percentile

90.2%