Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-3498.
AI-analyzed exploit summary The writeup details three distinct heap overflow vulnerabilities in Progea Movicon/PowerHMI SCADA software, affecting HTTP request handling on port 808 and an 'EIDP' protocol on port 12233. It includes technical analysis of memory corruption via negative Content-Length fields and arbitrary null-byte writes, with references to external PoC files.
Description
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
Exploits (1)
The writeup details three distinct heap overflow vulnerabilities in Progea Movicon/PowerHMI SCADA software, affecting HTTP request handling on port 808 and an 'EIDP' protocol on port 12233. It includes technical analysis of memory corruption via negative Content-Length fields and arbitrary null-byte writes, with references to external PoC files.