CVE-2011-4044
MediumExploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.
Risk Assessment
The risk involves remote file modification by an attacker, potentially leading to data integrity compromise, system damage, or further privilege escalation in industrial environments.
Recommendation
It is recommended to immediately update ARC Informatique PcVue, FrontVue, and PlantVue to the latest available version that fixes this vulnerability, and restrict ActiveX control execution in browsers.
Original NVD description (English source)
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.