« Volver al listado

CVE-2011-3499

Estado: ModificadaAlta (10)—

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Progea — Movicon Powerhmi

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-3499",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-09-16T17:26:14.840",
  "references": [
    {
      "url": "http://aluigi.altervista.org/adv/movicon_3-adv.txt",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69789",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.altervista.org/adv/movicon_3-adv.txt",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69789",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location."
    },
    {
      "lang": "es",
      "value": "Progea Movicon / PowerHMI 11.2.1085 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída) y posiblemente ejecutar código arbitrario a través de un paquete EIDP con una campo tamaño extenso, que escribe un byte cero a una localización de memoria arbitraria."
    }
  ],
  "lastModified": "2026-06-16T23:33:22.463",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:progea:movicon_powerhmi:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3015872-AD3D-47A7-B749-E75FE2E01B22",
              "versionEndIncluding": "11.2.1085"
            },
            {
              "criteria": "cpe:2.3:a:progea:movicon_powerhmi:11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D9C3308-E740-4DC8-B267-61AC37E8C8A7"
            },
            {
              "criteria": "cpe:2.3:a:progea:movicon_powerhmi:11.0.1017:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25B35A7C-DA0D-435C-9844-9363D19B6F38"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}