CVE:CVE-2010-4557
CNNVD:CNNVD-201012-254
用于Invensys Foxboro I/A Series Batch 8.1版本和其他产品中的Invensys Wonderware InBatch 8.1和9.0版本中的lm_tcp服务中存在缓冲区溢出漏洞。远程攻击者可以借助对端口9001的特制请求导致拒绝服务(崩溃)并可能执行任意代码。
solution:Upgrade invensys wonderware_inbatch to a higher version than 8.1,9.0,and avoid the version 8.1,9.0; Upgrade invensys foxboro_i/a_series_batch to a higher version than 8.1,and avoid the version 8.1