CVE-2011-3321 Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a d...
HighCVSS 9.3
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens simatic wincc flexible runtime | All versions | No fix listed |
| Siemens simatic wincc runtime | All versions | No fix listed |
References
- cache.automation.siemens.com
- 46011 third-party-advisory vendor-advisory
- support.automation.siemens.com
- www.us-cert.gov us-government-resource
- simatic-wincc-runtime-bo(69803) vdb-entry