CVE-2011-3321: Buffer Overflow
Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3321?
CVE-2011-3321 has a high severity, as it allows remote attackers to exploit a heap-based buffer overflow leading to memory corruption or arbitrary code execution.
How do I fix CVE-2011-3321?
To mitigate CVE-2011-3321, ensure that you update to the latest versions of Siemens SIMATIC WinCC flexible Runtime and SIMATIC WinCC Runtime that address this vulnerability.
What systems are affected by CVE-2011-3321?
CVE-2011-3321 affects Siemens SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced installations.
What types of attacks can exploit CVE-2011-3321?
Attackers can exploit CVE-2011-3321 to cause a denial of service or potentially execute arbitrary code by sending crafted packets to the TCP service.
Is CVE-2011-3321 still a threat today?
Yes, CVE-2011-3321 remains a threat if the affected software is not patched or updated, potentially exposing systems to attacks.