CVE-2007-4827
Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.73%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus requests to TCP port 502.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 4.73% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- automated solutions/modbus slave activex control
- Source
- cve@mitre.org
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-15Patch
- http://osvdb.org/38259
- http://www.automatedsolutions.com/pub/asmbslv/ReadMe.htmPatch
- http://www.kb.cert.org/vuls/id/981849US Government Resource
- http://www.nessus.org/plugins/index.php?view=single&id=26066
- http://www.securityfocus.com/archive/1/479967/100/0/threaded
- http://www.securityfocus.com/bid/25713
- http://www.securitytracker.com/id?1018707
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36677
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-15Patch
- http://osvdb.org/38259
- http://www.automatedsolutions.com/pub/asmbslv/ReadMe.htmPatch
- http://www.kb.cert.org/vuls/id/981849US Government Resource
- http://www.nessus.org/plugins/index.php?view=single&id=26066
- http://www.securityfocus.com/archive/1/479967/100/0/threaded
- http://www.securityfocus.com/bid/25713
- http://www.securitytracker.com/id?1018707
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36677
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.