CVE-2011-4043
HighExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
An integer overflow in an unspecified ActiveX control in the SVUIGrd.ocx library of ARC Informatique PcVue (versions 6.0-10.0), FrontVue, and PlantVue allows a remote attacker to execute arbitrary code by providing a large integer parameter value, leading to a buffer overflow.
Risk Assessment
The risk for the organization is the potential for remote code execution, which could lead to system compromise, data theft, or disruption of industrial infrastructure.
Recommendation
It is recommended to immediately update PcVue, FrontVue, and PlantVue to the latest available version that fixes this vulnerability, and to restrict access to the ActiveX control through appropriate browser security settings.
Other vulnerabilities in ARC Informatique PcVue
See all- CVE-2011-4044Medium
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.
- CVE-2011-4045Medium
Buffer overflow vulnerability in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue. A remote attacker can cause a denial of service via a crafted HTML document.
Original NVD description (English source)
Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code via a large value for an integer parameter, leading to a buffer overflow.