CVE-2017-5177

A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been identified, where an attacker with a specially crafted packet could overflow the fixed length buffer. This could allow remote code execution.

Score

CVSS 3.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-05-19

Last modified

2024-08-05

Weaknesses

CWE-119, CWE-121

Affected products

• Winplc7 Firmware (Vipa Controls)

References

• http://www.securityfocus.com/bid/96413
• https://ics-cert.us-cert.gov/advisories/ICSA-17-054-01
• https://www.exploit-db.com/exploits/42693/