ICONICS GENESIS32 and BizViz ActiveX Stack Overflow
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-2089US | high9.3 | Exploit | ||
Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 an… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-11-131-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-11-131-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationBizViz
ICONICS has released a patch that addresses this vulnerability for each of the affected products. ICONICS recommends that users of GENESIS32 and BizViz install the patch entitled “WebHMI V9.21 Patch.” (http://iconics.com/certs) ICONICS also plans to address this vulnerability in the upcoming version 9.22 update of GENESIS32 and BizViz. ICONICS expects this update to be available in June 2011.
http://iconics.com/certs - MitigationGENESIS32
ICONICS has released a patch that addresses this vulnerability for each of the affected products. ICONICS recommends that users of GENESIS32 and BizViz install the patch entitled “WebHMI V9.21 Patch.” (http://iconics.com/certs) ICONICS also plans to address this vulnerability in the upcoming version 9.22 update of GENESIS32 and BizViz. ICONICS expects this update to be available in June 2011.
http://iconics.com/certs
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan