CVE-2011-1563 Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an....
HighCVSS 10.0
EPSS 74.6%
Framework module
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3) On_FC_CTAGLIST_FCS_CDELTAG, (4) On_FC_CTAGLIST_FCS_ADDTAGMS, (5) On_FC_RFUSER_FCS_LOGIN, (6) unspecified "On_FC_BINFILE_FCS_*FILE", (7) On_FC_CGETTAG_FCS_GETTELEMETRY, (8) On_FC_CGETTAG_FCS_GETCHANNELTELEMETRY, (9) On_FC_CGETTAG_FCS_SETTELEMETRY, (10) On_FC_CGETTAG_FCS_SETCHANNELTELEMETRY, and (11) On_FC_SCRIPT_FCS_STARTPROG packets to port 910.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realflex realwin | <= 2.1 | No fix listed |
| realflex realwin | = 1.06 | No fix listed |
| realflex realwin | = 2.0 | No fix listed |
References
- aluigi.org exploit
- aluigi.org exploit
- aluigi.org exploit
- aluigi.org exploit
- aluigi.org exploit
- aluigi.org exploit
- 43848 third-party-advisory vendor-advisory
- 8176 third-party-advisory
- 17025 exploit
- 46937 vdb-entry
- www.us-cert.gov us-government-resource
- ADV-2011-0742 vdb-entry vendor-advisory