Overview
Automated Solutions OPC Server contains a heap corruption vulnerability in the Modbus/TCP Master OPC server.
Description
Automated Solutions Modbus/TCP Master OPC Server contains a heap corruption vulnerability. The server is vulnerable to an attacker writing an arbitrary number of double words or DWORDs onto the heap. For additional information see ICSA-10-322-02A. |
Impact
Successful exploitation would likely not allow arbitrary code execution; however, an exploit could possibly corrupt the OPC server memory and cause a denial of service. |
Solution
Upgrade |
Restrict Access |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to Jeremy Brown for reporting this vulnerability to ICS-CERT.
This document was written by Michael Orlando.
Other Information
| CVE IDs: | CVE-2010-4709 |
| Severity Metric: | 1.02 |
| Date Public: | 2010-11-22 |
| Date First Published: | 2011-02-03 |
| Date Last Updated: | 2011-02-03 15:09 UTC |
| Document Revision: | 22 |