CVE-2010-4557
Invensys Wonderware InBatch 8.1 and 9.0 - Buffer Overflow via Crafted Request to Port 9001
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4557. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Wonderware InBatch's lm_tcp service (port 9001), allowing arbitrary memory writes via overwritten pointers used in memset operations. The PoC uses a crafted UDP packet to trigger the overflow.
Description
Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request to port 9001.
Exploits (1)
This exploit targets a buffer overflow vulnerability in Wonderware InBatch's lm_tcp service (port 9001), allowing arbitrary memory writes via overwritten pointers used in memset operations. The PoC uses a crafted UDP packet to trigger the overflow.