ICONICS GENESIS32 and BizViz ActiveX Stack Overflow
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2011-2089US | high9.3 | Exploit | ||
Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 an… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-11-131-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-11-131-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationBizViz
ICONICS has released a patch that addresses this vulnerability for each of the affected products. ICONICS recommends that users of GENESIS32 and BizViz install the patch entitled “WebHMI V9.21 Patch.” (http://iconics.com/certs) ICONICS also plans to address this vulnerability in the upcoming version 9.22 update of GENESIS32 and BizViz. ICONICS expects this update to be available in June 2011.
http://iconics.com/certs - MitigationGENESIS32
ICONICS has released a patch that addresses this vulnerability for each of the affected products. ICONICS recommends that users of GENESIS32 and BizViz install the patch entitled “WebHMI V9.21 Patch.” (http://iconics.com/certs) ICONICS also plans to address this vulnerability in the upcoming version 9.22 update of GENESIS32 and BizViz. ICONICS expects this update to be available in June 2011.
http://iconics.com/certs
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan