NVD

Id
10591  
Name
CVE-2011-4051  
Description
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-12-05  
Modified Date
2011-12-08  
Seq
2011-4051  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59882 10591 CVE-2011-4051 http://www.indusoft.com/hotfixes/hotfixes.php  View
59883 10591 CVE-2011-4051 http://www.us-cert.gov/control_systems/pdf/ICSA-11-319-01.pdf  View
59884 10591 CVE-2011-4051 http://www.zerodayinitiative.com/advisories/ZDI-11-330/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32951 JVNDB-2011-003191 InduSoft Web Studio の CEServer.exe における任意のコードを実行される脆弱性 InduSoft Web Studio の Remote Agent モジュール内の CEServer コンポーネントにおける CEServer.exe は、認証要求をしないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-4051 51958 CVE-2011-4051 10591 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003191.html 2011-12-05 2012-02-03 View