CVE-2010-4709

EPSS 16.2%

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/16040unverified cve_referencewww.exploit-db.com/exploits/16040unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://automatedsolutions.com/pub/asmbtcpopc/readme.htm http://secunia.com/advisories/43029 https://exchange.xforce.ibmcloud.com/vulnerabilities/64944 http://www.exploit-db.com/exploits/16040 http://www.kb.cert.org/vuls/id/768840 http://www.securityfocus.com/bid/45974 http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf http://www.vupen.com/english/advisories/2011/0209