CVE-2011-4875: Buffer Overflow
Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute arbitrary code via vectors related to Unicode strings.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4875?
CVE-2011-4875 has been classified with a high severity level due to the potential for remote code execution through a stack-based buffer overflow.
How do I fix CVE-2011-4875?
To fix CVE-2011-4875, apply the latest security patches or updates provided by Siemens for the affected WinCC flexible and HMI Panel software.
What software versions are affected by CVE-2011-4875?
CVE-2011-4875 affects Siemens WinCC flexible versions 2004, 2005, 2007, 2008, WinCC V11, and various SIMATIC HMI panels.
Can CVE-2011-4875 be exploited remotely?
Yes, CVE-2011-4875 can be exploited remotely if the Transfer Mode is enabled, allowing attackers to execute arbitrary code.
What impact could CVE-2011-4875 have on my system?
Exploitation of CVE-2011-4875 could lead to unauthorized access and control over the affected systems, resulting in significant operational risks.