CVE-2011-4535
Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers to cause a denial of service (application crash) or…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 26.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP file.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 26.73% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- craig peterson/turbopower abbrevia · scadatec/modbustagserver · scadatec/scadaphone
- Source
- cret@cert.org
References
- http://sourceforge.net/projects/tpabbrevia/files/Abbrevia%204.0.zip/downloadPatch
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-362-01.pdfUS Government Resource
- http://sourceforge.net/projects/tpabbrevia/files/Abbrevia%204.0.zip/downloadPatch
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-362-01.pdfUS Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.