CVE-2011-4039 Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via...
HighCVSS 9.3
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a "write access violation."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dreamreport dream report | <= 3.43 | No fix listed |
| dreamreport dream report | = 3.21 | No fix listed |
| dreamreport dream report | = 3.41 | No fix listed |
| dreamreport dream report | = 3.42 | No fix listed |
| invensys wonderware hmi reports | <= 3.42.835.0304 | No fix listed |
References
- 47742 third-party-advisory vendor-advisory
- 47933 third-party-advisory vendor-advisory
- www.us-cert.gov us-government-resource
- www.us-cert.gov us-government-resource