Unscored CVE-2016-4509 EUVD-2016-5496GHSA-cw5c-p8h6-gfwg

Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code v…

Published Jul 3, 2016 · Updated Aug 6, 2024 · Assigned by icscert

Description

Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file.

Advisories 1

ICSA-16-182-01 Eaton ELCSoft Programming Software Memory Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-182-01
http://www.zerodayinitiative.com/advisories/ZDI-16-408
91524 vdb-entry