Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-3499. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary The writeup details multiple memory corruption vulnerabilities in Progea Movicon/PowerHMI SCADA/HMI software, including heap overflows via negative Content-Length fields and arbitrary memory writes through malformed EIDP protocol packets. Exploits are provided as external binary files for remote execution.
Description
Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.
Exploits (1)
The writeup details multiple memory corruption vulnerabilities in Progea Movicon/PowerHMI SCADA/HMI software, including heap overflows via negative Content-Length fields and arbitrary memory writes through malformed EIDP protocol packets. Exploits are provided as external binary files for remote execution.