EIP-2026-119131

This Metasploit module exploits a stack-based buffer overflow in Siemens FactoryLink 8's CSService.exe via a maliciously crafted CSMSG_ListFiles_REQ message, leading to arbitrary code execution. The exploit uses an egghunter to ensure payload integrity and targets specific Windows versions with known JMP ESP addresses.