CVE-2008-2474 Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 o...
HighCVSS 10.0
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ABB pcu400 | = 4.4 | No fix listed |
| ABB pcu400 | = 4.5 | No fix listed |
| ABB pcu400 | = 4.6 | No fix listed |
References
- 32047 third-party-advisory
- 4320 third-party-advisory
- VU#343971 third-party-advisory us-government-resource
- www.kb.cert.org
- 20080925 C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow mailing-list
- 31391 vdb-entry