PT-2013-2506

CVE-2013-0656

·

Publicado

2013-01-21

·

Atualizado

2013-01-22

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC RF-MANAGER versions 2008 and earlier Siemens RF-MANAGER Basic versions 3.0 and earlier
Description A buffer overflow issue exists in a third-party ActiveX component. This allows remote attackers to execute arbitrary code via a crafted web site.
Recommendations For Siemens SIMATIC RF-MANAGER versions 2008 and earlier, update to a version that is not affected by this issue. For Siemens RF-MANAGER Basic versions 3.0 and earlier, update to a version that is not affected by this issue. As a temporary workaround, consider disabling the use of the third-party ActiveX component until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Identificadores relacionados
CVE-2013-0656
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com