CVE-2011-1564 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 18.6% (pctl 97)
Patch early
A public exploit exists.
Description
Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which trigger a heap-based buffer overflow.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 18.63% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-189 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2011-04-05 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| realflex | realwin |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | DATAC RealWin - Multiple Vulnerabilities | 2011-03-22 |
References
- http://aluigi.org/adv/realwin_6-adv.txt
- http://secunia.com/advisories/43848
- http://securityreason.com/securityalert/8177
- http://www.exploit-db.com/exploits/17025
- http://www.securityfocus.com/bid/46937
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf
- http://www.vupen.com/english/advisories/2011/0742
- http://aluigi.org/adv/realwin_6-adv.txt
- http://secunia.com/advisories/43848
- http://securityreason.com/securityalert/8177
- http://www.exploit-db.com/exploits/17025
- http://www.securityfocus.com/bid/46937
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf
- http://www.vupen.com/english/advisories/2011/0742
→ the Explorer · watch your stack · NVD