ICONICS WebHMI ActiveX Parameter Overflow

Strike ID:
E11-4m101
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
2
Year:
2011

Description

This strike exploits a stack buffer overflow vulnerability in ICONICS Genesis32 WebHMI. The flaw is due to a lack of input validation by the 'SetActiveXGUID' method. A remote, unauthenticated attacker could exploit this vulnerability by enticing a target user to view a specially crafted web page.

CVE

Bid