CVE-2011-4535 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 26.7% (pctl 98)
Patch early
A public exploit exists.
Description
Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP file.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 26.73% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2012-04-03 |
| Last modified | 2026-06-16 |
Affected (3)
| Vendor | Product |
|---|---|
| craig peterson | turbopower abbrevia |
| scadatec | modbustagserver |
| scadatec | scadaphone |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | ScadaTEC ScadaPhone 5.3.11.1230 - Local Stack Buffer Overflow (Metasploit) | 2011-09-13 |
| exploit-db | ScadaTEC ModbusTagServer & ScadaPhone - '.zip' Local Buffer Overflow | 2011-09-12 |
References
→ the Explorer · watch your stack · NVD