Out-of-bounds write in GENESIS64 and GENESIS32 - CVE-2020-12011
Published: June 19, 2020 / Updated: July 1, 2020
Vulnerability identifier: #VU29162
CSH Severity: High
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-12011
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input in VariantClear in GenBroker64/GenBroker32 component. A remote attacker can send a specially crafted communication packet, trigger out-of-bounds write and execute arbitrary code on the target system.
Affected software
GENESIS64
GENESIS32
Energy AnalytiX
BizViz
Hyper Historian
MobileHMI
GENESIS32
Energy AnalytiX
BizViz
Hyper Historian
MobileHMI
How to mitigate CVE-2020-12011
Install updates from vendor's website.
GENESIS64 - addressed in versions 10.95.2, 10.95.5, 10.96
GENESIS32 - addressed in versions 9.4, 9.5
GENESIS32 - addressed in versions 9.4, 9.5