CVE-2010-4709

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.6 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
automatedsolutionsmodbus\/tcp_master_opc_server
𝑥
≤ 3.0.1
automatedsolutionsmodbus\/tcp_master_opc_server
2.0
automatedsolutionsmodbus\/tcp_master_opc_server
2.0_build_1:_build_1
automatedsolutionsmodbus\/tcp_master_opc_server
2.0a:a
automatedsolutionsmodbus\/tcp_master_opc_server
2.1
automatedsolutionsmodbus\/tcp_master_opc_server
2.2
automatedsolutionsmodbus\/tcp_master_opc_server
2.2a:a
automatedsolutionsmodbus\/tcp_master_opc_server
2.3
automatedsolutionsmodbus\/tcp_master_opc_server
2.3a:a
automatedsolutionsmodbus\/tcp_master_opc_server
2.4
automatedsolutionsmodbus\/tcp_master_opc_server
2.4a:a
automatedsolutionsmodbus\/tcp_master_opc_server
2.5
automatedsolutionsmodbus\/tcp_master_opc_server
2.6
automatedsolutionsmodbus\/tcp_master_opc_server
2.6a:a
automatedsolutionsmodbus\/tcp_master_opc_server
2.6b:b
automatedsolutionsmodbus\/tcp_master_opc_server
2.7
automatedsolutionsmodbus\/tcp_master_opc_server
2.7a:a
automatedsolutionsmodbus\/tcp_master_opc_server
2.7b:b
automatedsolutionsmodbus\/tcp_master_opc_server
2.7c:c
automatedsolutionsmodbus\/tcp_master_opc_server
2.7d:d
automatedsolutionsmodbus\/tcp_master_opc_server
2.7e:e
automatedsolutionsmodbus\/tcp_master_opc_server
2.7f:f
automatedsolutionsmodbus\/tcp_master_opc_server
2.8
automatedsolutionsmodbus\/tcp_master_opc_server
2.9
automatedsolutionsmodbus\/tcp_master_opc_server
2.9.1
automatedsolutionsmodbus\/tcp_master_opc_server
2.9.4
automatedsolutionsmodbus\/tcp_master_opc_server
2.9.5
automatedsolutionsmodbus\/tcp_master_opc_server
2.9_build_2.9.3:_build_2.9
automatedsolutionsmodbus\/tcp_master_opc_server
2.10
automatedsolutionsmodbus\/tcp_master_opc_server
2.11
automatedsolutionsmodbus\/tcp_master_opc_server
2.12
automatedsolutionsmodbus\/tcp_master_opc_server
2.12.1
automatedsolutionsmodbus\/tcp_master_opc_server
2.12.3
automatedsolutionsmodbus\/tcp_master_opc_server
3.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://automatedsolutions.com/pub/asmbtcpopc/readme.htm
http://secunia.com/advisories/43029
http://www.exploit-db.com/exploits/16040
http://www.kb.cert.org/vuls/id/768840
http://www.securityfocus.com/bid/45974
http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf
http://www.vupen.com/english/advisories/2011/0209
https://exchange.xforce.ibmcloud.com/vulnerabilities/64944
http://automatedsolutions.com/pub/asmbtcpopc/readme.htm
http://secunia.com/advisories/43029
http://www.exploit-db.com/exploits/16040
http://www.kb.cert.org/vuls/id/768840
http://www.securityfocus.com/bid/45974
http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf
http://www.vupen.com/english/advisories/2011/0209
https://exchange.xforce.ibmcloud.com/vulnerabilities/64944