Language:
https://www.zerodayinitiative.com/advisories/ZDI-12-155/
https://www.zerodayinitiative.com/advisories/ZDI-12-168/
https://seclists.org/fulldisclosure/2012/Aug/276
https://seclists.org/fulldisclosure/2012/Aug/344
http://www.nessus.org/u?ef59308d
http://www.indusoft.com/Products-Downloads/Security-Hotfix-Updates
Severity: High
ID: 60084
File Name: scada_advantech_studio_issymbol_activex_bof.nbin
Version: 1.235
Type: local
Agent: windows
Family: SCADA
Published: 7/20/2012
Updated: 10/10/2024
Supported Sensors: Nessus Agent, Nessus
Risk Factor: High
Score: 7.4
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2011-0340
CPE: cpe:/a:advantech:advantech_studio
Required KB Items: SCADA/Apps/Advantech/Studio/Installed, SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 8/30/2011
Vulnerability Publication Date: 9/1/2011
Core Impact
Metasploit (InduSoft Web Studio ISSymbol.ocx InternationalSeparator() Heap Overflow)
ExploitHub (EH-13-398)
CVE: CVE-2011-0340
BID: 47596
ICS-ALERT: 11-131-01
ICSA: 11-168-01, 11-168-01A, 12-137-02, 12-249-03