CVE-2011-4045
MediumExploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
Buffer overflow vulnerability in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue. A remote attacker can cause a denial of service via a crafted HTML document.
Risk Assessment
The risk is the potential for remote denial of service on SCADA/HMI systems, which could disrupt industrial processes and critical infrastructure safety.
Recommendation
Update ARC Informatique PcVue, FrontVue, and PlantVue to the latest patched version. Restrict access to the ActiveX control via browser security settings and zone assignments.
Original NVD description (English source)
Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to cause a denial of service via a crafted HTML document.