What is CVE-2011-4055?

CVE-2011-4055 is a vulnerability in Siemens Tecnomatix Factorylink, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2012-01-08.

Is CVE-2011-4055 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Siemens Tecnomatix Factorylink

CVE-2011-4055

Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL.

Vulnerability class: Buffer Overflow

EPSS: 0.048 (91.0th percentile) — read the EPSS interpretation.

Affected products

Siemens Tecnomatix_factorylink — versions 6.6.1, 7.5.217, 8.0.2.54
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cret@cert.org (US Government Resource, x_refsource_MISC)
cret@cert.org (vdb-entry, x_refsource_XF)
cret@cert.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cret@cert.org (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2011-4055?: CVE-2011-4055 is a vulnerability in Siemens Tecnomatix Factorylink, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2012-01-08.
Is CVE-2011-4055 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.