Description
Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
ICONICS WebHMI ActiveX Buffer Overflow
exploit/windows/scada/iconics_webhmi_setactivexguid
Exploit-DB 2
- ICONICS WebHMI - ActiveX Buffer Overflow (Metasploit) EDB-17269 · remote · May 10, 2011 · verified
- ICONICS WebHMI - ActiveX Stack Overflow EDB-17240 · remote · May 3, 2011 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- ICSA-11-131-01 ICONICS GENESIS32 and BizViz ActiveX Stack Overflow CISA ICS & IT advisories · Jun 9, 2025
References
- http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf
- 72135 vdb-entry
- 44417 third-party-advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf
- ADV-2011-1174 vdb-entry
- 47704 vdb-entry
- 17240 exploit
- 17269 exploit
- webhmi-activex-bo(67267) vdb-entry