CVE-2011-4051

CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

69.09% chance of exploitation in the next 30 days, 99th percentile

Published

2011-12-05

Updated

2024-09-17

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/indusoft_webstudio…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21837

Security advisories

• http://www.indusoft.com/hotfixes/hotfixes.php
• http://www.zerodayinitiative.com/advisories/ZDI-11-330

References

• CVE Record
• NVD entry