ICONICS GENESIS32 and BizViz ActiveX Trusted Zone Vulnerability

🗓️ 03 Apr 2011 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 28 Views

ICONICS GENESIS32 and BizViz ActiveX Trusted Zone Vulnerability. Design issue in ActiveX control allows arbitrary domain intrusion into trusted zone, leading to potential remote code execution. Patch and mitigation options available

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2011-5088	18 Apr 201217:55	–	attackerkb
CVE	CVE-2011-5088	18 Apr 201217:00	–	cve
Cvelist	CVE-2011-5088	18 Apr 201217:00	–	cvelist
EUVD	EUVD-2011-4988	7 Oct 202500:30	–	euvd
NVD	CVE-2011-5088	18 Apr 201217:55	–	nvd
Prion	Design/Logic Flaw	18 Apr 201217:55	–	prion
RedhatCVE	CVE-2011-5088	22 May 202501:46	–	redhatcve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2011/icsa-11-182-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-11-182-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

03 Apr 2011 06:00Current

7.7High risk

Vulners AI Score7.7

CVSS 29.3

EPSS0.01078