CVE-2011-3321: Buffer Overflow
First published: Thu Sep 15 2011(Updated: )
Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens WinCC flexible runtime | ||
| Siemens SIMATIC WinCC Runtime Advanced |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-244-01.pdf
- http://support.automation.siemens.com/WW/view/en/29054992
- http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29054992_FAQ/Siemens_Security_Advisory_SSA-460621_V1_2.pdf
- http://secunia.com/advisories/46011
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69803
Frequently Asked Questions
What is the severity of CVE-2011-3321?
CVE-2011-3321 has a high severity, as it allows remote attackers to exploit a heap-based buffer overflow leading to memory corruption or arbitrary code execution.
How do I fix CVE-2011-3321?
To mitigate CVE-2011-3321, ensure that you update to the latest versions of Siemens SIMATIC WinCC flexible Runtime and SIMATIC WinCC Runtime that address this vulnerability.
What systems are affected by CVE-2011-3321?
CVE-2011-3321 affects Siemens SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced installations.
What types of attacks can exploit CVE-2011-3321?
Attackers can exploit CVE-2011-3321 to cause a denial of service or potentially execute arbitrary code by sending crafted packets to the TCP service.
Is CVE-2011-3321 still a threat today?
Yes, CVE-2011-3321 remains a threat if the affected software is not patched or updated, potentially exposing systems to attacks.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/siemens
- canonical/siemens wincc flexible runtime
- canonical/siemens simatic wincc runtime advanced