Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-3491.
AI-analyzed exploit summary The document details three memory corruption vulnerabilities in Progea Movicon/PowerHMI SCADA/HMI software, including heap overflows via negative Content-Length fields and buffer overflows in HTTP request handling. It provides technical analysis and references external PoC files for exploitation.
Description
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.
Exploits (1)
The document details three memory corruption vulnerabilities in Progea Movicon/PowerHMI SCADA/HMI software, including heap overflows via negative Content-Length fields and buffer overflows in HTTP request handling. It provides technical analysis and references external PoC files for exploitation.