Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-4518.
AI-analyzed exploit summary The document describes a remote code execution vulnerability in Microsys PROMOTIC SCADA software (version 8.1.4) due to an uninitialized pointer in the GetPromoticSite method of the PmTable.ocx ActiveX control. The vulnerability requires user interaction for exploitation, and no fix is available.
Description
Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to read arbitrary files via unspecified vectors.
Exploits (1)
The document describes a remote code execution vulnerability in Microsys PROMOTIC SCADA software (version 8.1.4) due to an uninitialized pointer in the GetPromoticSite method of the PmTable.ocx ActiveX control. The vulnerability requires user interaction for exploitation, and no fix is available.