CVE-2011-4044

MediumCVSS 5.8/10Last modified Jul 9, 2026

Description

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.

Metrics

CVSS 2.0 5.8/10AV:N/AC:M/Au:N/C:N/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdfUS Government Resource
https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440Broken Link
http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdfUS Government Resource
https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440Broken Link

Timeline

Published: Apr 3, 2012
Last modified: Jul 9, 2026
NVD status: Analyzed

Related CVEs from 2011

CVE-2011-40454.3Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows r CVE-2011-40465.0The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-CVE-2011-40479.3The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access.CVE-2011-40484.3The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easi CVE-2011-40505.0Buffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200 allows remote attackers to cause a denial of se CVE-2011-405110.0CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which CVE-2011-40529.3Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows r CVE-2011-40539.3Untrusted search path vulnerability in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) before 9.0.0.11291 allows local users t CVE-2011-40544.3Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to i CVE-2011-40559.3Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 CVE-2011-40565.8An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allo CVE-2011-40575.0Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service