CVE-2010-4709

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://automatedsolutions.com/pub/asmbtcpopc/readme.htm
http://secunia.com/advisories/43029Vendor Advisory
http://www.exploit-db.com/exploits/16040Exploit
http://www.kb.cert.org/vuls/id/768840US Government Resource
http://www.securityfocus.com/bid/45974Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf
http://www.vupen.com/english/advisories/2011/0209Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64944
http://automatedsolutions.com/pub/asmbtcpopc/readme.htm
http://secunia.com/advisories/43029Vendor Advisory
http://www.exploit-db.com/exploits/16040Exploit
http://www.kb.cert.org/vuls/id/768840US Government Resource
http://www.securityfocus.com/bid/45974Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf
http://www.vupen.com/english/advisories/2011/0209Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64944

Timeline

Published: Jan 28, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-47104.3Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbi CVE-2010-471110.0Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote at CVE-2010-471210.0Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attacker CVE-2010-471310.0Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute CVE-2010-471410.0Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Hos CVE-2010-47155.0Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before CVE-2010-47164.3Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject a CVE-2010-47176.5Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allo CVE-2010-47184.3Multiple cross-site scripting (XSS) vulnerabilities in the Lyftenbloggie (com_lyftenbloggie) component 1.1.0 for Joomla! allow remote attack CVE-2010-47197.5Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files CVE-2010-47207.5SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component before 1.1 for Joomla! allows remote attackers to execute arbi CVE-2010-47217.5SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the id parameter.