Lucene search
HistorySep 16, 2011 - 2:28 p.m.
CVE-2011-3491
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.1
Confidence
High
EPSS
0.025
Percentile
90.2%
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.
Affected configurations
Node
progeamovicon_powerhmiRange≤11.2.1085
ORprogeamovicon_powerhmiMatch11
ORprogeamovicon_powerhmiMatch11.0.1017
| Vendor | Product | Version | CPE |
|---|---|---|---|
| progea | movicon_powerhmi | * | cpe:2.3:a:progea:movicon_powerhmi:*:*:*:*:*:*:*:* |
| progea | movicon_powerhmi | 11 | cpe:2.3:a:progea:movicon_powerhmi:11:*:*:*:*:*:*:* |
| progea | movicon_powerhmi | 11.0.1017 | cpe:2.3:a:progea:movicon_powerhmi:11.0.1017:*:*:*:*:*:*:* |
Related
prion
prion
Heap overflow
2011-09-16 14:28:00
cvelist
cvelist
CVE-2011-3491
2011-09-16 14:00:00
checkpoint_advisories
checkpoint_advisories
Progea Movicon Negative Content-Length Buffer Overflow (CVE-2011-3491)
2011-11-01 00:00:00
cve
cve
CVE-2011-3491
2011-09-16 14:28:13
ics
ics
Progea Movicon Power HMI Vulnerabilities
2014-01-24 12:00:00
nessus
nessus
Progea Movicon < 11.2 Build 1086 Multiple Vulnerabilities
2014-09-10 00:00:00
exploitdb
exploitdb
progea movicon / powerhmi 11.2.1085 - Multiple Vulnerabilities
2011-09-14 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.1
Confidence
High
EPSS
0.025
Percentile
90.2%
Related for NVD:CVE-2011-3491