Wonderware InBatch ActiveX Vulnerabilities

🗓️ 31 Aug 2011 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 48 Views

Wonderware InBatch ActiveX Vulnerabilities (Update A). Three buffer overflow vulnerabilities in Invensys Wonderware InBatch ActiveX controls could allow remote code execution or DoS. Affected versions 8.1 SP1, 9.0 SP2, 9.5. InBatch Runtime Client components impacted

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2011-4870	8 Jan 201200:00	–	cve
Cvelist	CVE-2011-4870	8 Jan 201200:00	–	cvelist
EUVD	EUVD-2011-4787	7 Oct 202500:30	–	euvd
NVD	CVE-2011-4870	8 Jan 201200:55	–	nvd
Prion	Buffer overflow	8 Jan 201200:55	–	prion
RedhatCVE	CVE-2011-4870	22 May 202509:49	–	redhatcve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2011/icsa-11-332-01a.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-11-332-01a
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

31 Aug 2011 06:00Current

8.2High risk

Vulners AI Score8.2

CVSS 26.8

EPSS0.01703