CVE-2011-4056

Siemens Tecnomatix FactoryLink <8.0.2.54 - RCE

Title source: llm
STIX 2.1

Description

An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method.

References (2)

Core 2
Core References
US Government Resource x_refsource_misc
http://www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf
Patch, Vendor Advisory x_refsource_confirm
http://www.usdata.com/sea/factorylink/en/p_nav5.asp

Scores

EPSS 0.0032
EPSS Percentile 55.0%

Details

Status published
Products (3)
siemens/tecnomatix_factorylink 6.6.1
siemens/tecnomatix_factorylink 7.5.217
siemens/tecnomatix_factorylink 8.0.2.54
Published Jan 08, 2012
Tracked Since Feb 18, 2026