CVE-2011-3499 | BDVDB-2026-47265 Detail

Description#

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://aluigi.altervista.org/adv/movicon_3-adv.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/69789
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf

Exploit#

No public exploit known

History#

Version 12011-09-16Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.