CVE-2011-4042
HighExploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.
Risk Assessment
The risk involves unauthenticated remote code execution, potentially leading to full compromise of the SCADA system and disruption of industrial processes.
Recommendation
Apply the vendor-supplied update for affected versions of PcVue, FrontVue, and PlantVue immediately, and consider restricting ActiveX control execution in browsers.
Original NVD description (English source)
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.