Stack-based buffer overflow in DAQFactory - CVE-2011-3492

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing a crafted NETB packet to UDP port 20034. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2011-3492

Links to Public Exploits and PoC-codes

• Exploit #4473 - DaqFactory 5.85 build 1853 - Stack Overflow (August 11, 2020)
• Exploit #4363 - DaqFactory - HMI NETB Request Overflow (Metasploit) (August 11, 2020)

External References

• http://aluigi.altervista.org/adv/daqfactory_1-adv.txt
• http://osvdb.org/75496
• http://www.exploit-db.com/exploits/17855
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-02.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69764

Related Security Bulletins

• Stack-based buffer overflow in AzeoTech DAQFactory