CVEvulnerability
CVE-2011-4055
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-01-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL.
Affected configurations
• siemens tecnomatix factorylink 6.6.1
• siemens tecnomatix factorylink 7.5.217
• siemens tecnomatix factorylink 8.0.2.54
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/51266 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf US Government Resource
- http://www.usdata.com/sea/factorylink/en/p_nav5.asp Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72117 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/bid/51266 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf US Government Resource
- http://www.usdata.com/sea/factorylink/en/p_nav5.asp Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72117 exchange.xforce.ibmcloud.com