Intrusion PreventionWellinTech.Kingview.SCADA.HistoryServer.EXE.Buffer.Overflow
Description
This indicates a possible attack attempt against a Heap Buffer Overflow vulnerability in WellinTech KingView.
The vulnerability is caused by a boundary error when the vulnerable application handles remote opcode 3 requests. An attacker can exploit this vulnerability by sending a specially crafted request to the target service. Successful attacks may cause injection and execution of arbitrary code in the context of the SYSTEM user.
Affected Products
WellinTech KingView 6.53
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply updates or fixes, available from the website:
http://www.kingview.com/news/detail.aspx?contentid=587
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 31070 |
| Created | Feb 23, 2012 |
| Updated | Apr 11, 2022 |
| Risk |
|
| CVE ID | CVE-2011-4536 |
| Exploit Prediction Score | 5.74% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | SCADA |