CVE-2011-4535

2022-10-0316:15:13

CWE-119

[email protected]

web.nvd.nist.gov

110

cve-2011-4535

buffer overflow

turbopower abbrevia

scadatec

scadaphone

modbustagserver

denial of service

arbitrary code

zip file.

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

High

0.513 Medium

EPSS

Percentile

97.6%

JSON

Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP file.

Affected configurations

NVD

Node

craig_petersonturbopower_abbreviaRange≤3.05

scadatecmodbustagserverRange≤4.1.1.81

scadatecscadaphoneRange≤5.3.11.1230

CPENameOperatorVersion
craig_peterson:turbopower_abbreviacraig peterson turbopower abbreviale3.05
scadatec:modbustagserverscadatec modbustagserverle4.1.1.81
scadatec:scadaphonescadatec scadaphonele5.3.11.1230

CPE	Name	Operator	Version
craig_peterson:turbopower_abbrevia	craig peterson turbopower abbrevia	le	3.05
scadatec:modbustagserver	scadatec modbustagserver	le	4.1.1.81
scadatec:scadaphone	scadatec scadaphone	le	5.3.11.1230