CVE-2011-1914

Published: Feb 21, 2012Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected (3)

Products: Advantech: Adam Opc Server, Modbus Rtu Opc Server, Modbus Tcp Opc Server

3 products

Adam Opc Server

Modbus Rtu Opc Server

Modbus Tcp Opc Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Advantech Adam Opc Server	Up to 3.01.011

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Advantech Modbus Rtu Opc Server	Up to 3.01.010

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Advantech Modbus Tcp Opc Server	Up to 3.01.09

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-01.pdf

Source: cret@cert.org

PatchUS Government Resource

http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

Timeline

No history available yet.