CVE-2010-2974

Published: Aug 5, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server (WAS) before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment (IDE) and the InFusion Integrated Engineering Environment (IEE), allows remote attackers to execute arbitrary code via the first argument to the UnsubscribeData method.

Affected (7)

Products: Invensys: Wonderware Archestra Configuration Access Component Activex Control, Wonderware Application Server

Invensys

2 products

Wonderware Archestra Configuration Access Component Activex Control

Wonderware Application Server

Configuration A

7 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Invensys Wonderware Archestra Configuration Access Component Activex Control	All versions
Invensys Wonderware Application Server	Up to 3.1
Invensys Wonderware Application Server	Version 2.0
Invensys Wonderware Application Server	Version 2.1
Invensys Wonderware Application Server	Version 3.0
Invensys Wonderware Application Server	Version 3.1
Invensys Wonderware Application Server	Version 3.1 sp1