← Back

CVE-2010-4709

nvd nist
Published: Jan 28, 2011Modified: Apr 29, 2026

JSON object

Loading...
7.6
Vector
AV:N/AC:H/Au:N/C:C/I:C/A:C
Exploitability: 4.9 / Impact: 10.0
Source: NVD

Description

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field.

Affected (34)

Automatedsolutions
1 product
Modbus/tcp Master Opc Server
Configuration A
34 vulnerable
Vulnerable SoftwareAffected Versions
Automatedsolutions
Modbus/tcp Master Opc Server
Up to 3.0.1
Modbus/tcp Master Opc Server
Version 2.0
Modbus/tcp Master Opc Server
Version 2.0_build_1
Modbus/tcp Master Opc Server
Version 2.0a
Modbus/tcp Master Opc Server
Version 2.10
Modbus/tcp Master Opc Server
Version 2.11
Modbus/tcp Master Opc Server
Version 2.12.1
Modbus/tcp Master Opc Server
Version 2.12.3
Modbus/tcp Master Opc Server
Version 2.12
Modbus/tcp Master Opc Server
Version 2.1
Modbus/tcp Master Opc Server
Version 2.2
Modbus/tcp Master Opc Server
Version 2.2a
Modbus/tcp Master Opc Server
Version 2.3
Modbus/tcp Master Opc Server
Version 2.3a
Modbus/tcp Master Opc Server
Version 2.4
Modbus/tcp Master Opc Server
Version 2.4a
Modbus/tcp Master Opc Server
Version 2.5
Modbus/tcp Master Opc Server
Version 2.6
Modbus/tcp Master Opc Server
Version 2.6a
Modbus/tcp Master Opc Server
Version 2.6b
Modbus/tcp Master Opc Server
Version 2.7
Modbus/tcp Master Opc Server
Version 2.7a
Modbus/tcp Master Opc Server
Version 2.7b
Modbus/tcp Master Opc Server
Version 2.7c
Modbus/tcp Master Opc Server
Version 2.7d
Modbus/tcp Master Opc Server
Version 2.7e
Modbus/tcp Master Opc Server
Version 2.7f
Modbus/tcp Master Opc Server
Version 2.8
Modbus/tcp Master Opc Server
Version 2.9.1
Modbus/tcp Master Opc Server
Version 2.9.4
Modbus/tcp Master Opc Server
Version 2.9.5
Modbus/tcp Master Opc Server
Version 2.9
Modbus/tcp Master Opc Server
Version 2.9_build_2.9.3
Modbus/tcp Master Opc Server
Version 3.0.0

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (16)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.