CVEvulnerability

CVE-2011-5088

9.3 HIGH Published 2012-04-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-04-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execute arbitrary code via a crafted web site, related to a "Workbench32/WebHMI component SetTrustedZone Policy vulnerability."

Affected configurations

• iconics bizviz 9.21 • iconics genesis32 9.21

References