CVE-2010-2974
Critical
Description
Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server (WAS) before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment (IDE) and the InFusion Integrated Engineering Environment (IEE), allows remote attackers to execute arbitrary code via the first argument to the UnsubscribeData method.
SeverityCritical
CVSS9.3
Exploit probability—
ProductInvensys Wonderware Archestra Configuration Access Component Activex Control
PublishedAug 5, 2010
First seenAug 5, 2010
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| invensys wonderware_archestra_configuration_access_component_activex_control | No range specified | — |
| invensys wonderware_application_server | v ≤ 3.1, 2.0, 2.1, 3.0, 3.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.