CVE-2008-4322

RealWin Server 2.0 - Remote Code Execution via Crafted FC_INFOTAG/SET_CONTROL Packet

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2008-4322. PoCs published by Metasploit, MC, including Metasploit module exploits/windows/scada/realwin.

AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in DATAC RealWin SCADA Server via a crafted FC_INFOTAG/SET_CONTROL packet, allowing arbitrary code execution. It targets version 2.0 (Build 6.0.10.37) and uses a universal return address for reliability.

Description

Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary code via a crafted FC_INFOTAG/SET_CONTROL packet.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16385

View Code ZIP pw:eip

This Metasploit module exploits a stack buffer overflow in DATAC RealWin SCADA Server via a crafted FC_INFOTAG/SET_CONTROL packet, allowing arbitrary code execution. It targets version 2.0 (Build 6.0.10.37) and uses a universal return address for reliability.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: DATAC Control International RealWin SCADA Server 2.0 (Build 6.0.10.37)

No auth needed

Prerequisites: Network access to TCP port 910 on the target

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

metasploit WORKING POC GREAT

by MC · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/realwin.rb