CVE:CVE-2011-5163
CNNVD:CNNVD-201209-330
Schneider Electric CitectSCADA 7.20之前版本和Mitsubishi MX4 SCADA 7.20之前版本中的Batch模块中未指定的第三方组件中存在缓冲区溢出漏洞。本地攻击者可利用该漏洞通过登录序列中的较长字符串执行任意代码。
solution:Upgrade mitsubishi-automation mx4_scada to a higher version than 7.10,and avoid the version (,7.10]; Upgrade schneider-electric citectscada to a higher version than 7.10,and avoid the version (,7.10]