CVE-2011-1563: Buffer Overflow
Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an OnFCCONNECTFCSLOGIN packet, and crafted (2) OnFCCTAGLISTFCSCADDTAG, (3) OnFCCTAGLISTFCSCDELTAG, (4) OnFCCTAGLISTFCSADDTAGMS, (5) OnFCRFUSERFCSLOGIN, (6) unspecified "OnFCBINFILEFCSFILE", (7) OnFCCGETTAGFCSGETTELEMETRY, (8) OnFCCGETTAGFCSGETCHANNELTELEMETRY, (9) OnFCCGETTAGFCSSETTELEMETRY, (10) OnFCCGETTAGFCSSETCHANNELTELEMETRY, and (11) OnFCSCRIPTFCSSTARTPROG packets to port 910.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1563?
CVE-2011-1563 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2011-1563?
To fix CVE-2011-1563, upgrade to the latest version of RealFlex RealWin that addresses these buffer overflow vulnerabilities.
Which versions are affected by CVE-2011-1563?
CVE-2011-1563 affects RealFlex RealWin versions up to and including 2.1 and specific builds like 1.06.
What type of attack is associated with CVE-2011-1563?
CVE-2011-1563 allows remote attackers to exploit the vulnerability through crafted packets that trigger stack-based buffer overflows.
Is CVE-2011-1563 a local or remote vulnerability?
CVE-2011-1563 is a remote vulnerability, meaning it can be exploited over a network.