CVE-2016-4509

MEDIUM 6.0CVE-2016-4509 · Published 03/07/2016 · updated 17/06/2026

In short

CVE-2016-4509 is a MEDIUM (CVSS 6.0) vulnerability affecting elcsoft (eaton).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
elcsoft eaton	`≤ 2.4.01`	No fix yet

Description

Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file.

References

securityfocus.com/bid/91524
zerodayinitiative.com/advisories/ZDI-16-408
ics-cert.us-cert.gov/advisories/ICSA-16-182-01 · Third Party Advisory

More vulnerabilities in elcsoft

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free