CVE-2011-4881

The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted HTTP request.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cret@cert.org

Published

2012-04-13

Last modified

2024-09-16

Affected products

• Webmi2ads (Atvise)

References

• http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-01.pdf