CVE Feed

    Dashboard / CVE / CVE-2010-4557

    CVE-2010-4557

    Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request to port 9001.

    Published:Dec 17, 2010
    Last Modified:Apr 11, 2025
    EPS:Dec 17, 2010
    EPSS Score:0.45054
    CVSS Score:10

    Affected Products

    Vendor
    Invensys
    Product
    Foxboro I\/a Series Batch
    Vendor
    Invensys
    Product
    Wonderware Inbatch

    Exploits

    http://aluigi.org/adv/inbatch_1-adv.txthttp://aluigi.org/adv/inbatch_1-adv.txthttps://www.exploit-db.com/exploits/15707

    References

    http://aluigi.org/adv/inbatch_1-adv.txt
    http://iom.invensys.com/EN/Pages/IOM_CyberSecurityUpdates.aspx
    http://iom.invensys.com/EN/pdfLibrary/SecurityAlert_Invensys_SecurityAlert-LFSEC00000051_12-10.pdf
    http://secunia.com/advisories/42528
    http://www.exploit-db.com/exploits/15707
    http://www.kb.cert.org/vuls/id/647928
    http://www.us-cert.gov/control_systems/pdf/ICSA-10-348-01.pdf
    http://www.vupen.com/english/advisories/2010/3244
    http://aluigi.org/adv/inbatch_1-adv.txt
    http://iom.invensys.com/EN/Pages/IOM_CyberSecurityUpdates.aspx
    http://iom.invensys.com/EN/pdfLibrary/SecurityAlert_Invensys_SecurityAlert-LFSEC00000051_12-10.pdf
    http://secunia.com/advisories/42528
    http://www.exploit-db.com/exploits/15707
    http://www.kb.cert.org/vuls/id/647928
    http://www.us-cert.gov/control_systems/pdf/ICSA-10-348-01.pdf
    http://www.vupen.com/english/advisories/2010/3244

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High