Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer
| Reporter | Title | Published | Views | Family All 25 |
|---|---|---|---|---|
 | CVE-2011-4518 | 13 Oct 201100:00 | – | circl |
| CVE-2011-4519 | 13 Oct 201100:00 | – | circl |
| CVE-2011-4520 | 13 Oct 201100:00 | – | circl |
 | CVE-2011-4518 | 23 May 201317:00 | – | cve |
| CVE-2011-4519 | 23 May 201317:00 | – | cve |
| CVE-2011-4520 | 23 May 201317:00 | – | cve |
 | CVE-2011-4518 | 23 May 201317:00 | – | cvelist |
| CVE-2011-4519 | 23 May 201317:00 | – | cvelist |
| CVE-2011-4520 | 23 May 201317:00 | – | cvelist |
 | EUVD-2011-4444 | 7 Oct 202500:30 | – | euvd |
10
#######################################################################
Luigi Auriemma
Application: Microsys PROMOTIC
http://www.promotic.eu/en/promotic/scada-pm.htm
Versions: 8.1.4
Platforms: Windows
Bug: ActiveX GetPromoticSite unitialized pointer
Exploitation: remote
Date: 30 Oct 2011
Author: Luigi Auriemma
e-mail: [email protected]
web: aluigi.org
#######################################################################
1) Introduction
2) Bug
3) The Code
4) Fix
#######################################################################
===============
1) Introduction
===============
From vendor's website:
"PROMOTIC is a complex SCADA object software tool for creating
applications that monitor, control and display technological processes
in various industrial areas. "
#######################################################################
======
2) Bug
======
Code execution through an unitialized pointer exploitable via the
GetPromoticSite method of the PmTable.ocx ActiveX
(19BA6EE6-4BB4-11D1-8085-0020AFC8C4AF).
Note that the ActiveX object could require the acknoledge of the user
for being executed.
#######################################################################
===========
3) The Code
===========
http://aluigi.org/poc/promotic_2.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/18049.zip
#######################################################################
======
4) Fix
======
No fix.
#######################################################################Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
31 Oct 2011 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
EPSS0.26385