Description
Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified ActiveX controls.
Advisories 1
- ICSA-11-195-01 Wonderware Information Server CISA ICS & IT advisories · Jun 5, 2025
References
- 48976 vdb-entry
- wonderware-infoserver-activex-bo(68988) vdb-entry
- 45476 third-party-advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-195-01.pdf