Siemens.SIMATIC.WinCC.Flexible.Runtime.Stack.Buffer.Overflow

Release Date Dec 22, 2011
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a Buffer Overflow vulnerability in Siemens SIMATIC WinCC Flexible Runtime. The vulnerability is caused because the vulnerable application fails to perform adequate bounds checking on user-supplied data. A remote attacker can exploit this vulnerability by sending a malicious request. Successful attacks may allow the attacker to execute arbitrary code in the security context of the affected application.
Affected Products Siemens SIMATIC WinCC flexible Runtime 2008 SP2 update 13 and prior.
Recommended Actions Currently we are not aware of any vendor-supplied patches. Restrict access to trusted hosts only.
Coverage IPS VCM
Reference/s https://portal.telussecuritylabs.com/threat/TSL20111201-01

Fortinet