Lucene search

K
cve[email protected]CVE-2007-4827
HistorySep 19, 2007 - 6:17 p.m.

CVE-2007-4827

2007-09-1918:17:00
CWE-119
web.nvd.nist.gov
41
cve-2007-4827
modbus/tcp
minihmi.exe
automated solutions
modbus slave
activex control
heap corruption
arbitrary code execution
remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.337 Low

EPSS

Percentile

97.1%

Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus requests to TCP port 502.

Affected configurations

NVD
Node
automated_solutionsmodbus_slave_activex_controlRange1.4

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.337 Low

EPSS

Percentile

97.1%

Related for CVE-2007-4827