CVE-2011-1564 Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCA...
HighCVSS 10.0
EPSS 18.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which trigger a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realflex realwin | <= 2.1 | No fix listed |
| realflex realwin | = 1.06 | No fix listed |
| realflex realwin | = 2.0 | No fix listed |
References
- aluigi.org exploit
- 43848 third-party-advisory vendor-advisory
- 8177 third-party-advisory
- 17025 exploit
- 46937 exploit vdb-entry
- www.us-cert.gov us-government-resource
- ADV-2011-0742 vdb-entry vendor-advisory