CVE-2010-4740

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
VendorProductVersion
scadaenginebacnet_opc_client
𝑥
≤ 1.0.24
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/1009-exploits/bacnet-overflow.py.txt
http://secunia.com/advisories/41466
http://securityreason.com/securityalert/8083
http://www.kb.cert.org/vuls/id/660688
http://www.securityfocus.com/bid/43289
http://www.us-cert.gov/control_systems/pdf/ICSA-10-264-01.pdf
http://packetstormsecurity.org/1009-exploits/bacnet-overflow.py.txt
http://secunia.com/advisories/41466
http://securityreason.com/securityalert/8083
http://www.kb.cert.org/vuls/id/660688
http://www.securityfocus.com/bid/43289
http://www.us-cert.gov/control_systems/pdf/ICSA-10-264-01.pdf