VulnerabilityModified

CVE-2010-4740

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message.

HIGH 9.3EPSS 41.6%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 41.6%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 41.62% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: scadaengine/bacnet opc client
Source: cve@mitre.org

References

http://packetstormsecurity.org/1009-exploits/bacnet-overflow.py.txtExploit
http://secunia.com/advisories/41466Vendor Advisory
http://securityreason.com/securityalert/8083
http://www.kb.cert.org/vuls/id/660688US Government Resource
http://www.securityfocus.com/bid/43289Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-10-264-01.pdfUS Government Resource
http://packetstormsecurity.org/1009-exploits/bacnet-overflow.py.txtExploit
http://secunia.com/advisories/41466Vendor Advisory
http://securityreason.com/securityalert/8083
http://www.kb.cert.org/vuls/id/660688US Government Resource
http://www.securityfocus.com/bid/43289Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-10-264-01.pdfUS Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.