CVE-2012-0241

This exploit leverages a vulnerability in the BroadWin WebAccess SCADA/HMI ActiveX component (bwocxrun.ocx) to achieve remote code execution. It creates a malicious VBScript file and uses Windows Management Instrumentation (WMI) to execute arbitrary code, specifically launching calc.exe as a proof-of-concept.

The writeup details two vulnerabilities in BroadWin WebAccess Client's bwocxrun.ocx ActiveX component: a format string bug in OcxSpool and arbitrary memory corruption via WriteTextData/CloseFile. It includes technical analysis but no direct exploit code.