CVE-2011-4044
MediumExploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.
Risk Assessment
The risk involves remote file modification by an attacker, potentially leading to data integrity compromise, system damage, or further privilege escalation in industrial environments.
Recommendation
It is recommended to immediately update ARC Informatique PcVue, FrontVue, and PlantVue to the latest available version that fixes this vulnerability, and restrict ActiveX control execution in browsers.
Other vulnerabilities in ARC Informatique PcVue
See all- CVE-2011-4043High
An integer overflow in an unspecified ActiveX control in the SVUIGrd.ocx library of ARC Informatique PcVue (versions 6.0-10.0), FrontVue, and PlantVue allows a remote attacker to execute arbitrary code by providing a large integer parameter value, leading to a buffer overflow.
- CVE-2011-4045Medium
Buffer overflow vulnerability in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue. A remote attacker can cause a denial of service via a crafted HTML document.
Original NVD description (English source)
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.