CVE-2011-4055

CRITICAL 9.3CVE-2011-4055 · Published 08/01/2012 · updated 16/06/2026

In short

CVE-2011-4055 is a CRITICAL (CVSS 9.3) vulnerability affecting tecnomatix factorylink (siemens).
Chance of exploitation in the next 30 days (EPSS): 4.6%, higher than 91.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tecnomatix factorylink siemens	`= 6.6.1= 7.5.217= 8.0.2.54`	No fix yet

Description

Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL.

References

securityfocus.com/bid/51266
us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf · US Government Resource
usdata.com/sea/factorylink/en/p_nav5.asp · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/72117

More vulnerabilities in tecnomatix factorylink

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free