VulnerabilityModified

CVE-2011-2089

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary…

HIGH 9.3EPSS 38.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 38.3%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 38.32% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: iconics/bizviz · iconics/genesis32
Source: cve@mitre.org

References

http://secunia.com/advisories/44417Vendor Advisory
http://www.exploit-db.com/exploits/17240Exploit
http://www.exploit-db.com/exploits/17269Exploit
http://www.osvdb.org/72135
http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdfExploit
http://www.securityfocus.com/bid/47704Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdfUS Government Resource
http://www.vupen.com/english/advisories/2011/1174Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67267
http://secunia.com/advisories/44417Vendor Advisory
http://www.exploit-db.com/exploits/17240Exploit
http://www.exploit-db.com/exploits/17269Exploit
http://www.osvdb.org/72135
http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdfExploit
http://www.securityfocus.com/bid/47704Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdfUS Government Resource
http://www.vupen.com/english/advisories/2011/1174Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67267

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.