Stack-based Buffer Overflow in Siemens WinCC Flexible and HMI Panels

CVE-2011-4875

Summary

A stack-based buffer overflow vulnerability has been identified in the HmiLoad component of the runtime loader used in various versions of Siemens WinCC Flexible and associated HMI panels, including WinCC V11. When Transfer Mode is enabled, this flaw allows remote attackers to execute arbitrary code by exploiting vulnerabilities related to Unicode string handling. Organizations using affected products are advised to review their security posture and apply recommended patches to mitigate potential exploitation risks.

References