CVE-2012-0254

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 08-09-2012 12:28

Last modified: - 03-02-2022 08:44

Total changes: - 2

Description

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS) Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls (ECC) SymmetrE R410.1 allows remote attackers to execute arbitrary code via unspecified vectors.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

7.5

Base score

10.0

6.4

Exploitability score

Impact score

Verification logic

vendor=honeywell AND product=enterprise_building_manager AND version=r400

vendor=honeywell AND product=enterprise_building_manager AND version=r410.1

vendor=honeywell AND product=experion AND version=r200

vendor=honeywell AND product=experion AND version=r300

vendor=honeywell AND product=experion AND version=r310

vendor=honeywell AND product=experion AND version=r400.0

vendor=honeywell AND product=symmetre AND version=r410.1

Reference

Keywords

CVE-2012-0254

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2012-0254

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures