CVE-2011-0488

CRÍTICO 10.0CVE-2011-0488 · Published 18/01/2011 · updated 16/06/2026

En resumen

CVE-2011-0488 es una vulnerabilidad CRÍTICO (CVSS 10.0) que afecta a advantech studio (advantech), web studio (indusoft).
Probabilidad de explotación en los próximos 30 días (EPSS): 8.6%, mayor que el 95.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
advantech studio advantech	`= 6.1`	No fix yet
web studio indusoft	`= 7.0`	No fix yet

Description

Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.

References

downloadt.advantech.com/download/downloadsr.aspx · Vendor Advisory
secunia.com/advisories/42883 · Vendor Advisory
secunia.com/advisories/42903 · Vendor Advisory
advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htm · Patch
indusoft.com/blog
kb.cert.org/vuls/id/506864 · US Government Resource
osvdb.org/70396
securityfocus.com/bid/45783
us-cert.gov/control_systems/pdf/ICSA-10-337-01.pdf · US Government Resource
vupen.com/english/advisories/2011/0092 · Vendor Advisory
vupen.com/english/advisories/2011/0093 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/64678

Más vulnerabilidades de advantech studio

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free