APP: ABB MicroSCADA Wserver Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the ABB MicroSCADA Wserver. The vulnerabilities are because user controlled data is copied to stack-based buffers without verification of the size. It may enable arbitrary code execution. A remote unauthenticated attacker can exploit this vulnerability by sending requests with a malicious parameter to the vulnerable service. Successful exploitation could lead to arbitrary code execution in the context of the Wserver process.

Short Name

SCADA:ABB-MICROSCADA-BOF

Severity

Major

Recommended

False

Recommended Action

Drop

APP: ABB MicroSCADA Wserver Buffer Overflow

Found a potential security threat?