CVE-2011-3322
- State
- Published
- Severity
- Not scored
- Published
- Sep 15, 2011
- Updated
- Aug 6, 2024
- Reserved
- Aug 29, 2011
Description
Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an out-of-bounds read or write, leading to a stack-based buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 17827exploit
- procyon-telnet-bo(69632)vdb-entry
- http://www.stratsec.net/Research/Advisories/Procyon-Core-Server-HMI-Remote-Stack-Overflow
- 45866third-party-advisory
- http://www.uscert.gov/control_systems/pdf/ICSA-11-216-01.pdf
- 8374third-party-advisory
- 75371vdb-entry
- 49480vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.