Heap-based Buffer Overflow in Siemens WinCC Runtime Advanced Loader
CVE-2011-3321

Currently unrated

Key Information:

Vendor

Siemens
Status
Simatic Wincc Runtime
Simatic Wincc Flexible Runtime
Vendor
CVE Published:
16 September 2011

What is CVE-2011-3321?

A heap-based buffer overflow vulnerability exists in the Siemens WinCC Runtime Advanced Loader. This flaw can be exploited by remote attackers sending specially crafted packets to TCP port 2308, leading to memory corruption and denial of service. In some scenarios, there is a potential for attackers to execute arbitrary code, compromising the integrity and availability of the affected systems.

References

http://support.automation.siemens.com/WW/view/en/29054992
x_refsource_MISC
http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29...
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/69803
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.