CVE-2007-4827

Modbus Slave ActiveX Control < 1.4 - Remote Code Execution via Malformed Modbus Requests

Title source: llm

Description

Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus requests to TCP port 502.

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/36677

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018707

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/479967/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/38259

Patch x_refsource_misc

http://dvlabs.tippingpoint.com/advisory/TPTI-07-15

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/25713

Various Sources x_refsource_misc

http://www.nessus.org/plugins/index.php?view=single&id=26066

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/981849

Patch x_refsource_confirm

http://www.automatedsolutions.com/pub/asmbslv/ReadMe.htm

Scores

EPSS 0.0473

EPSS Percentile 90.8%

Details

CWE

CWE-119

Status published

Products (1)

automated_solutions/modbus_slave_activex_control < 1.4

Published Sep 19, 2007

Tracked Since Feb 18, 2026