Exploitation Summary
EIP tracks 3 public exploits for CVE-2011-3492.
PoCs published by Metasploit, Luigi Auriemma, including Metasploit module exploits/windows/scada/daq_factory_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Azeotech's DaqFactory HMI via a crafted 'NETB' request to UDP port 20034. It uses an egghunter to locate the payload in memory and achieves remote code execution on Windows XP SP3.
Description
Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in Azeotech's DaqFactory HMI via a crafted 'NETB' request to UDP port 20034. It uses an egghunter to locate the payload in memory and achieves remote code execution on Windows XP SP3.
This exploit targets a stack overflow vulnerability in DAQFactory's UDP packet handling on port 20034. The overflow occurs in the logging code due to unsafe use of sprintf, allowing remote code execution.
This Metasploit module exploits a stack buffer overflow in Azeotech's DaqFactory via a crafted 'NETB' request to UDP port 20034. It uses an egghunter to locate and execute a payload, achieving remote code execution.