CVE-2011-4043
HighExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
An integer overflow in an unspecified ActiveX control in the SVUIGrd.ocx library of ARC Informatique PcVue (versions 6.0-10.0), FrontVue, and PlantVue allows a remote attacker to execute arbitrary code by providing a large integer parameter value, leading to a buffer overflow.
Risk Assessment
The risk for the organization is the potential for remote code execution, which could lead to system compromise, data theft, or disruption of industrial infrastructure.
Recommendation
It is recommended to immediately update PcVue, FrontVue, and PlantVue to the latest available version that fixes this vulnerability, and to restrict access to the ActiveX control through appropriate browser security settings.
Original NVD description (English source)
Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code via a large value for an integer parameter, leading to a buffer overflow.