Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-4740.
PoCs published by Jeremy Brown, Jeremy Brown, MC, including Metasploit module exploits/windows/fileformat/bacnet_csv.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in BACnet OPC Client 1.0.24 by crafting a malicious CSV file that triggers a stack-based overflow, leading to arbitrary code execution via a JMP ESP technique.
Description
Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message.
Exploits (2)
This exploit targets a buffer overflow vulnerability in BACnet OPC Client 1.0.24 by crafting a malicious CSV file that triggers a stack-based overflow, leading to arbitrary code execution via a JMP ESP technique.
This Metasploit module exploits a stack buffer overflow in SCADA Engine BACnet OPC Client v1.0.24 by crafting a malicious CSV file that triggers arbitrary code execution when parsed.