Sign-up

ID

VAR-201204-0098


CVE

CVE-2011-4874


TITLE

MICROSYS PROMOTIC Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2012-002065

DESCRIPTION

Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file. PROMOTIC is a Windows-based SCADA software. PROMOTIC is prone to a remote code-execution vulnerability due to a use-after-free error. This may allow lead to corruption of valid data. Versions prior to PROMOTIC 8.1.7 are vulnerable

Trust: 2.61

sources: NVD: CVE-2011-4874 // JVNDB: JVNDB-2012-002065 // CNVD: CNVD-2012-1895 // BID: 52988 // IVD: f287df9c-2353-11e6-abef-000c29c66e3d

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: f287df9c-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-1895

AFFECTED PRODUCTS

vendor:microsysmodel:promoticscope:eqversion:8.0.6

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.0.2

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.1.0

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.0.1

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.0.7

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.0.5

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.0.4

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.0.0

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.0.3

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.1.2

Trust: 1.6

vendor:microsysmodel:promoticscope:eqversion:8.1.5

Trust: 1.0

vendor:microsysmodel:promoticscope:eqversion:8.1.4

Trust: 1.0

vendor:microsysmodel:promoticscope:eqversion:8.0.10

Trust: 1.0

vendor:microsysmodel:promoticscope:eqversion:8.0.12

Trust: 1.0

vendor:microsysmodel:promoticscope:eqversion:8.0.11

Trust: 1.0

vendor:microsysmodel:promoticscope:eqversion:8.1.1

Trust: 1.0

vendor:microsysmodel:promoticscope:lteversion:8.1.6

Trust: 1.0

vendor:microsysmodel:promoticscope:eqversion:8.0.9

Trust: 1.0

vendor:microsysmodel:promoticscope:eqversion:8.0.8

Trust: 1.0

vendor:microsysmodel:promoticscope:eqversion:8.1.3

Trust: 1.0

vendor:microsysmodel:promoticscope:eqversion:8.0.13

Trust: 1.0

vendor:microsysmodel:promoticscope:ltversion:8.1.7

Trust: 0.8

vendor:microsysmodel:spol. s r.o. microsysscope:eqversion:8.1.3

Trust: 0.6

vendor:microsysmodel:spol. s r.o. microsysscope:eqversion:8.1.4

Trust: 0.6

vendor:microsysmodel:spol. s r.o. microsysscope:eqversion:8.1.5

Trust: 0.6

vendor:promoticmodel:promoticscope:eqversion:8.1.5

Trust: 0.3

vendor:promoticmodel:promoticscope:eqversion:8.1.4

Trust: 0.3

vendor:promoticmodel:promoticscope:eqversion:8.1.3

Trust: 0.3

vendor:promoticmodel:promoticscope:neversion:8.1.7

Trust: 0.3

vendor:promoticmodel: - scope:eqversion:8.0.0

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.1

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.2

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.3

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.4

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.5

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.6

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.7

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.8

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.9

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.10

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.11

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.12

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.0.13

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.1.0

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.1.1

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.1.2

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.1.3

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.1.4

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:8.1.5

Trust: 0.2

vendor:promoticmodel: - scope:eqversion:*

Trust: 0.2

sources: IVD: f287df9c-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-1895 // BID: 52988 // JVNDB: JVNDB-2012-002065 // CNNVD: CNNVD-201204-288 // NVD: CVE-2011-4874

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2011-4874
value: HIGH

Trust: 1.0

NVD: CVE-2011-4874
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201204-288
value: HIGH

Trust: 0.6

IVD: f287df9c-2353-11e6-abef-000c29c66e3d
value: HIGH

Trust: 0.2

nvd@nist.gov: CVE-2011-4874
severity: HIGH
baseScore: 7.9
vectorString: AV:A/AC:M/AU:N/C:C/I:C/A:C
accessVector: ADJACENT_NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 5.5
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

IVD: f287df9c-2353-11e6-abef-000c29c66e3d
severity: HIGH
baseScore: 7.9
vectorString: AV:A/AC:M/AU:N/C:C/I:C/A:C
accessVector: ADJACENT_NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 5.5
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

sources: IVD: f287df9c-2353-11e6-abef-000c29c66e3d // JVNDB: JVNDB-2012-002065 // CNNVD: CNNVD-201204-288 // NVD: CVE-2011-4874

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.8

sources: JVNDB: JVNDB-2012-002065 // NVD: CVE-2011-4874

THREAT TYPE

specific network environment

Trust: 0.6

sources: CNNVD: CNNVD-201204-288

TYPE

Resource management error

Trust: 0.8

sources: IVD: f287df9c-2353-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201204-288

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-002065

PATCH
title:Version 8.1.7 (from 2.2.2012) - stable versionurl:http://www.promotic.eu/en/pmdoc/News.htm#ver80107
Trust: 0.8
title:PROMOTICurl:http://www.promotic.eu/en/promotic/scada-pm.htm
Trust: 0.8
title:PROMOTIC memory error reference patch for remote code execution vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/15799
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2012-1895 // 
            
            
            
            JVNDB: JVNDB-2012-002065

EXTERNAL IDS
db:NVDid:CVE-2011-4874
Trust: 3.5
db:ICS CERTid:ICSA-12-102-03
Trust: 3.3
db:BIDid:52988
Trust: 1.3
db:CNVDid:CNVD-2012-1895
Trust: 0.8
db:CNNVDid:CNNVD-201204-288
Trust: 0.8
db:JVNDBid:JVNDB-2012-002065
Trust: 0.8
db:IVDid:F287DF9C-2353-11E6-ABEF-000C29C66E3D
Trust: 0.2
sources:
            
            
            IVD: f287df9c-2353-11e6-abef-000c29c66e3d // 
            
            
            
            CNVD: CNVD-2012-1895 // 
            
            
            
            BID: 52988 // 
            
            
            
            JVNDB: JVNDB-2012-002065 // 
            
            
            
            CNNVD: CNNVD-201204-288 // 
            
            
            
            NVD: CVE-2011-4874

REFERENCES
url:http://www.us-cert.gov/control_systems/pdf/icsa-12-102-03.pdf
Trust: 3.3
url:http://www.promotic.eu/en/pmdoc/news.htm#ver80107
Trust: 1.6
url:http://www.securityfocus.com/bid/52988
Trust: 1.0
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/74846
Trust: 1.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4874
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4874
Trust: 0.8
url:http://www.promotic.eu/en/promotic/scada-pm.htm
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2012-1895 // 
            
            
            
            BID: 52988 // 
            
            
            
            JVNDB: JVNDB-2012-002065 // 
            
            
            
            CNNVD: CNNVD-201204-288 // 
            
            
            
            NVD: CVE-2011-4874

CREDITS
Luigi Auriemma
Trust: 0.3
sources:
            
            
            BID: 52988

SOURCES
db:IVDid:f287df9c-2353-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2012-1895
db:BIDid:52988
db:JVNDBid:JVNDB-2012-002065
db:CNNVDid:CNNVD-201204-288
db:NVDid:CVE-2011-4874

LAST UPDATE DATE
2025-04-11T23:20:41.565000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2012-1895date:2012-04-16T00:00:00
db:BIDid:52988date:2012-04-11T00:00:00
db:JVNDBid:JVNDB-2012-002065date:2012-04-16T00:00:00
db:CNNVDid:CNNVD-201204-288date:2012-04-17T00:00:00
db:NVDid:CVE-2011-4874date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:IVDid:f287df9c-2353-11e6-abef-000c29c66e3ddate:2012-04-16T00:00:00
db:CNVDid:CNVD-2012-1895date:2012-04-16T00:00:00
db:BIDid:52988date:2012-04-11T00:00:00
db:JVNDBid:JVNDB-2012-002065date:2012-04-16T00:00:00
db:CNNVDid:CNNVD-201204-288date:2012-04-17T00:00:00
db:NVDid:CVE-2011-4874date:2012-04-13T10:41:49.697