CVE-2011-4056

Name of the Vulnerable Software and Affected Versions Siemens Tecnomatix FactoryLink versions 6.6.1 through 8.0.2.54

Description The issue allows remote attackers to create or overwrite arbitrary files. This is achieved via the save method of an unspecified ActiveX control in ActBar.ocx.

Recommendations For versions 6.6.1, 7.5.217, and 8.0.2.54, consider disabling the use of the save method in the ActiveX control until a patch is available. Restrict access to the ActBar.ocx module to minimize the risk of exploitation.