CVE:CVE-2011-3321
CNNVD:CNNVD-201109-224
用于SIMATIC WinCC flexible Runtime和SIMATIC WinCC (TIA Portal) Runtime Advanced的Siemens WinCC Runtime Advanced Loader中存在基于堆的缓冲区溢出漏洞。远程攻击者可以借助到TCP端口2308特制的数据包导致拒绝服务（内存崩溃）或者可能执行任意代码。
solution:Upgrade siemens simatic_wincc_flexible_runtime to a higher version than *; Upgrade siemens simatic_wincc_runtime to a higher version than -